CVE-2025-67223
Published: 28 April 2026
Summary
CVE-2025-67223 is a high-severity Insecure Temporary File (CWE-377) vulnerability in Arandasoft (inferred from references). Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 37.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-22 (Publicly Accessible Content) and AU-9 (Protection of Audit Information).
Deeper analysis
CVE-2025-67223 is a vulnerability in the Aranda File Server (AFS) component of Aranda Software's Aranda Service Desk prior to version 8.3.12. It arises because daily activity logs are stored with predictable names in a publicly accessible directory, enabling attackers to obtain direct virtual paths to uploaded files. This flaw, associated with CWE-377 (Insecure Temporary File) and CWE-532 (Information Exposure Through Log Files), has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Unauthenticated remote attackers can exploit this issue over the network with low complexity and no user interaction required. By accessing the publicly exposed logs, they can enumerate virtual paths to uploaded files, bypass access controls, and download sensitive documents containing personally identifiable information (PII), resulting in high confidentiality impact.
Mitigation involves upgrading to Aranda Service Desk 8.3.12 or later. Vendor resources include the product page at https://arandasoft.com/en/productos/aranda-service-management/, release notes on the file server at https://docs.arandasoft.com/at-v8-release-notes/en/pages/release_pdf/file_server.html, and a GitHub repository at https://github.com/brandonperezlara/CVE-2025-67223 providing further details.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-209585
Vulnerability details
The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible directory, which allows unauthenticated remote attackers to obtain direct virtual paths of uploaded files and…
more
bypass access controls to download sensitive documents containing PII.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Public-facing AFS component allows unauthenticated log access revealing predictable file paths (T1190), directly enabling file/directory discovery (T1083) and unauthorized retrieval of sensitive local documents (T1005).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly restricts public access to system-generated logs containing sensitive file paths in publicly accessible directories.
Protects audit and activity logs from unauthorized access, preventing exposure of virtual paths to sensitive PII files.
Implements security safeguards for systems providing public access, such as file servers, to block unauthenticated retrieval of logs and sensitive documents.