CVE-2025-32803CWE-276

Insecure file permissions can result in confidential information leakage

Medium · published May 28, 2025

CVSS v3.1
4.0
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

In some cases, Kea log files or lease files may be world-readable.

This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00229 · 13.0th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-05-28T17:08Z
EPSS history
Timeline
  • 28 MAY 17:08Z
    Insecure file permissions can result in confidential information leakage
    cvelistv5