CVE-2025-2002CWE-532

CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP server credentials when the FTP server…

Medium · published March 12, 2025

CVSS v4.0
4.0
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure

of FTP server credentials when the FTP server is deployed, and the device is placed in debug mode by an

administrative user and the debug files are exported from the device.

The record
Technical detail
CVSS v4.0
4.0 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-03-12T15:25Z
EPSS history
Timeline
  • 12 MAR 15:25Z
    CWE-532: Insertion of Sensitive Information into Log Files vulnerability exists that could cause the disclosure of FTP server credentials when the FTP server…
    cvelistv5