Information Disclosure Vulnerability in Senstar Symphony Software

CVE-2025-12491

What is CVE-2025-12491?

The information disclosure vulnerability in Senstar Symphony's FetchStoredLicense method allows remote attackers to expose sensitive information without requiring authentication. This flaw provides unauthorized access to stored credentials, potentially leading to more serious security breaches. Organizations using affected versions of Senstar Symphony should take immediate steps to mitigate risks associated with this vulnerability.

References