CVE-2025-25002CWE-532

Azure Local Cluster Information Disclosure Vulnerability

Medium · published April 8, 2025

CVSS v3.1
6.8
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01120 · 65.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-04-08T17:23Z
EPSS history
Timeline
  • 08 APR 17:23Z
    Azure Local Cluster Information Disclosure Vulnerability
    cvelistv5