Executive brief
A security vulnerability exists in the Excavation Management Information System by Premierturk Information Technologies, a platform used for managing infrastructure and excavation projects. This flaw allows unauthorized individuals to access sensitive files and private personal information stored within the system. An exploit could lead to the exposure of confidential data and the misuse of system functionality, potentially impacting regulatory compliance and operational security.
Technical details
The Excavation Management Information System by Premierturk Information Technologies Inc. contains a vulnerability classified under CWE-552 (Files or Directories Accessible to External Parties) and CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor). The flaw allows a network-based attacker with low privileges to access sensitive directories and personal data without proper authorization. This can be leveraged for footprinting and functionality misuse. The issue is resolved in version 10.2025.01 and later.
Affected products
- Premierturk Information Technologies Inc. Excavation Management Information System before v.10.2025.01
Timeline
- 2025-11-11: disclosed
- 2025-11-11: advisory