Authentication Bypass by Primary Weakness, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solution…

CVE-2025-4320 affects Birebirsoft Software and Technology Solutions Sufirmam through version 23012026. The vulnerability involves authentication bypass through a weak password recovery mechanism for forgotten passwords. This allows attackers to exploit the password recovery process to bypass authentication controls. The vendor was contacted about the disclosure but did not respond. The issue enables both authentication bypass and password recovery exploitation attacks.