Security Advisory

CVE-2025-49618

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-03 00:00:00

Last updated 2025-07-03 13:17:49

Assigner mitre

CVSS score not scored

State PUBLISHED

In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.