CVE-2025-41012 | TCMAN GIM 20250304 /WS/PDAWebService.asmx UnlockUser pda:userId/pda:newPassword authorization

A vulnerability was found in TCMAN GIM 20250304. It has been declared as problematic. Affected by this issue is the function UnlockUser of the file /WS/PDAWebService.asmx. Executing manipulation of the argument pda:userId/pda:newPassword can lead to missing authorization.

This vulnerability is registered as CVE-2025-41012. It is possible to launch the attack remotely. No exploit is available.