CVE-2025-64299
6.9MEDIUM
What is CVE-2025-64299?
LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.
Affected Version(s)
LogStare Collector (for Linux) 2.4.1 and earlier
LogStare Collector (for Windows) 2.4.1 and earlier
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
CVSS V3.0
Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved