Security Advisory

CVE-2024-25654

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-18 00:00:00
Last updated 2025-03-14 00:32:18
Assigner mitre
State PUBLISHED

Description

Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.