CVE-2025-8864
6.8 mediumEPSS 0.2%
Medium (6.8). EPSS 0.2% chance of exploitation in the next 30 days.
Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logs
Severity
CVSS 4.0
6.8 mediumCVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
- CWE
- CWE-532
- Published
- Modified
- Record from
- the NVD, synced
References
Check your stackJSON