9.1

CVE-2025-58130

Apache Fineract: Server Key not masked

Insufficiently Protected Credentials vulnerability in Apache Fineract.

This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1.

Users are encouraged to upgrade to version 1.13.0, the latest release.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Fineract Version < 1.12.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.345
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://lists.apache.org/thread/d9zpkc86zk265523tfvbr8w7gyr6onoy
Vendor Advisory
Issue Tracking
http://www.openwall.com/lists/oss-security/2025/12/11/6
Third Party Advisory
Mailing List