Security Advisory
CVE-2025-58107
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the users name, e-mail address, device ID, bearer token, and base64-encoded password.