CVE-2025-14432CWE-532

CVE-2025-14432

Medium · published December 16, 2025

CVSS v3.1
4.9
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00400 · 32.8th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-12-16T21:15Z
Affected products (2)
ProductVersionsFixed in
hp/poly_videoos< 4.6.1-4442424.6.1-444242
hp/poly_tcos< 6.6.1-70018596.6.1-7001859
References (1)
https://support.hp.com/us-en/document/ish_13612310-13612332-16/hpsbpy04080 · [email protected]
EPSS history
Timeline
  • 16 DEC 15:15Z
    Poly Video - Sensitive Data Might Be Written to Log File
    cvelistv5