CVE-2025-2489CWE-922

Insecure storage of sensitive information in NTFS Tool

Medium · published March 18, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /Users/user/Library/Application Support/ntfs-tool/config.json.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00168 · 5.7th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2025-03-18T11:26Z
EPSS history
Timeline
  • 18 MAR 11:26Z
    Insecure storage of sensitive information in NTFS Tool
    cvelistv5