Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Desktop Alert PingAlert: Unauthorized Access to Sensitive Content

CVE-2025-54561 · published 11 months ago
Summary

The Desktop Alert PingAlert application server has a security flaw that allows unauthorized access to sensitive content. This means that someone with the wrong permissions could access confidential information. To fix this, update to the latest version of PingAlert.

What to do
  • Update desktopalert pingalert_application_server to version 6.1.1.5 or later.
Affected software
VendorProductAffected versions
desktopalert pingalert_application_server >= 6.1.0.11, < 6.1.1.5
cpe:2.3:a:desktopalert:pingalert_application_server:*:*:*:*:*:*:*:*
Original advisory text
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correc...
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-284Improper Access Control
Timeline
Published14 Nov 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-54561 · NVD
Track software like this
Free during beta