CVE-2025-49182CWE-540

Credential disclosure

High · published June 12, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.5th percentile
Weakness
CWE-540 · Inclusion of Sensitive Information in Source Code
Published
2025-06-12T13:15Z
EPSS history
Timeline
  • 12 JUN 13:15Z
    Credential disclosure
    cvelistv5