CVE-2024-25654

Published Mar 18, 2024

Last updated 8 months ago

Overview

Description
Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.
Source
cve@mitre.org
NVD status
Awaiting Analysis

Social media

Hype score
Not currently trending