The vulnerability identified as CVE-2025-15070 affects Gmission Web Fax version 3.0 prior to 3.0.1. It is categorized under CWE-200 (Exposure of Sensitive Information) and CWE-862 (Missing Authorization). The flaw allows unauthorized actors to abuse authentication mechanisms and gain access to sensitive information that should be protected. The CVSS 4.0 vector indicates the attack requires local access with low complexity and privileges, no user interaction, and results in high confidentiality impact without affecting integrity or availability.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information within the affected Web Fax application. This could compromise confidentiality of data handled by the system. There is no indication that integrity or availability are impacted. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Gmission's advisories for updates. Until a fix is available, restrict local access to trusted users only and review access controls to minimize exposure.