Sensitive Data Exposure in Microsoft Teams Admin Center by HP

CVE-2025-14432

What is CVE-2025-14432?

A vulnerability exists within the Microsoft Teams Admin Center whereby sensitive data may unintentionally be logged during device configuration changes made by an admin. The log files are only accessible to users with admin privileges, ensuring that the exposure is limited to authorized personnel. Importantly, this issue is specific to the Microsoft Teams Admin Center and does not arise from configuration changes executed via the provisioning server or the device's WebUI, mitigating broader impacts.

References