Information Disclosure Vulnerability in PX Backup by Pure Storage
CVE-2025-1308

8.4HIGH

Key Information:

Vendor

Pure Storage

Status
Px Backup
Vendor
CVE Published:
19 May 2025

What is CVE-2025-1308?

A vulnerability in PX Backup allows sensitive information to be inadvertently logged under certain conditions, potentially exposing private data. This could lead to unauthorized access and compromise data integrity. Users are advised to review their logging settings to mitigate the risk of exposure and ensure sensitive information is safeguarded.

Affected Version(s)

PX Backup 1.0.0 <= 2.6.0

PX Backup 2.7.0 <= 2.7.3

PX Backup 2.8.0 <= 2.8.1

References

https://support.purestorage.com/Pure_Security

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-1308 : Information Disclosure Vulnerability in PX Backup by Pure Storage