CVE-2025-27926CWE-276

In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by…

Medium · published March 10, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
27.2
In the wild
Unconfirmed
What it is

In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by unauthorized users.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-03-10T00:00Z
EPSS history
Timeline
  • 10 MAR 00:00Z
    In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by…
    cvelistv5