CVE-2025-14591

PII Leak Due to Change in EOR Handling

Medium · published December 20, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

⚠️ A misconfigured End-of-Record setting could expose your data! The Delphix Continuous Compliance bug fix has accidentally led to the potential unmasking of personally identifiable information (PII). 🔍 Think of it like a restaurant where the staff misreads the order and serves customer details instead of the delicious meals. If the wrong records are parsed, sensitive information could slip right through the cracks! If left unaddressed, this misconfiguration can lead to PII being displayed where it shouldn't be, jeopardizing user privacy. Imagine a menu that not only lists dinner options but also reveals the names and preferences of all your guests—certainly a recipe for disaster!

Put simply

Think of it like a restaurant where the staff misreads the order and serves customer details instead of the delicious meals. If the wrong records are parsed, sensitive information could slip right through the cracks! In Delphix Continuous Compliance version 2025.3.0 and later, an incorrect configuration of End-of-Record (EOR) characters allows for improper parsing of delimited files, potentially exposing sensitive PII that should remain masked.

What to do

If left unaddressed, this misconfiguration can lead to PII being displayed where it shouldn't be, jeopardizing user privacy. Imagine a menu that not only lists dinner options but also reveals the names and preferences of all your guests—certainly a recipe for disaster! Review your EOR configurations to ensure they are set correctly. Update to the latest version of Delphix Continuous Compliance to mitigate this risk, and conduct an audit of your data handling practices to prevent accidental exposure. You've got this! With the right steps, you can ensure your data remains safely protected. 🛡️

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00279 · 19.3th percentile
Published
2025-12-20T03:04Z
EPSS history
Timeline
  • 20 DEC 03:04Z
    PII Leak Due to Change in EOR Handling
    cvelistv5