NA

CVE-2024-25654

Published: 18/03/2024 Updated: 19/03/2024

Vulnerability Summary

Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.