{"id":"AZL-110339","summary":"CVE-2025-4558 affecting package gpm 1.20.7-24","details":"The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system.","modified":"2026-10-31T05:31:43Z","published":"2025-05-12T04:15:35Z","upstream":["CVE-2025-4558"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4558"}],"affected":[{"package":{"name":"gpm","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/gpm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.20.7-24"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110339.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}