CVE-2024-25654

5.5 mediumEPSS 0.2%

Medium (5.5) in avsystem unified management platform. EPSS 0.2% chance of exploitation in the next 30 days.

Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWEs: CWE-532, CWE-276
Published: 2024-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avsystem:unified_management_platform

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25654
https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25654

Check your stack JSON