7.5
CVE-2026-8671
- EPSS 0.22%
- Veröffentlicht 22.05.2026 13:15:28
- Zuletzt bearbeitet 02.06.2026 14:56:58
- Quelle vulnerability@ncsc.ch
- CVE-Watchlists
- Unerledigt
Log Files contain encrypted secrets
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.118 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| vulnerability@ncsc.ch | 7.5 | 1.7 | 5.3 |
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L
|
CWE-532 Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.
https://support.avantra.com/hc/en-us/articles/5535487249183