CVE-2025-3831CWE-200CWE-798

Exposed SFTP server

High · published August 12, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-798 · Use of Hard-coded Credentials
Published
2025-08-12T14:48Z
EPSS history
Timeline
  • 12 AUG 14:48Z
    Exposed SFTP server
    cvelistv5