CVE-2025-0760

Published Feb 26, 2025

Last updated a month ago

CVSS low 2.7

Overview

Description
A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption.
Source
vulnreport@tenable.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
2.7
Impact score
1.4
Exploitability score
1.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Severity
LOW

Weaknesses

vulnreport@tenable.com
CWE-522

Social media

Hype score
Not currently trending

  1. 🚨 New Tenable CVEs Released 🚨 🔹 CVE-2025-0760: Credential Disclosure in SMTP due to lack of encryption. 🔹 CVE-2025-1091: Broken Authorization in IOA scripts allows unauthorized access 🔄 Read our report: https://t.co/d6eWI99D7G #CyberSecurity #Tenable #CVE #Vulnerability ht

    @BaseFortify

    26 Feb 2025

    12 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2025-0760 A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption. https://t.co/Og8GkwFSkb

    @CVEnew

    25 Feb 2025

    378 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References