CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub
Attackers can extract hardcoded credentials from the SoliClub executable to access sensitive data or bypass security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-1029?
CVE-2025-1029 is a high-severity vulnerability in Utarit Information Services Inc. SoliClub, published on 18 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable.
This issue affects SoliClub: from 5.2.4 before 5.3.7.
Weakness: CWE-798
Which versions are affected by CVE-2025-1029?
It affects 1 product.
Products include Utarit Soliclub.
How do I fix CVE-2025-1029?
No fix has been published for CVE-2025-1029 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-1029 being exploited?
There is no known exploitation of CVE-2025-1029 in the wild and no public exploit code.
Other vulnerabilities in Utarit Information Services Inc. SoliClub
- CVE-2024-3305 IDOR in Utarit Information's SoliClub
- CVE-2024-3306 IDOR in Utarit Information's SoliClub
- CVE-2025-1030 Sensitive Data Exposure in Utarit Informatics' SoliClub
- CVE-2025-1031 IDOR in Utarit Informatics' SoliClub
- CVE-2025-7358 Use of Hard-coded Credentials in Utarit Informatics' SoliClub
Sources
Also known as GHSA-6qmm-428w-r8c9.