MEDIUMCVSS v3.1 4.9Vulnerability

CVE-2025-7203

The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because the system does not sufficiently protect or obscure these credentials when the remote logging feature is enabled. An attacker with administrative access to the Management Console or direct access to product files can retrieve these sensitive credentials. This allows for potential manipulation of log entries and compromise of the integrity and confidentiality of the remote log server.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00154
Cvss severity
MEDIUM
Cvss score
4.9
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Score
4.9
Cvss version
3.1
Cve id
CVE-2025-7203
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
First seen by Signal
2026-10-19T19:31:52+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Published at
2026-10-19T17:17:00.157
Last modified
2026-10-20T20:17:11.197
Epss percentile
0.04089

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2025-7203 (CVSS v3.1 4.9) — Ninja Signal Threat Intelligence | Ninja Signal