CVE-2025-0760 LOW

CVE-2025-0760: Stored Credential Disclosure Vulnerability

Vendor Tenable

Product Tenable Identity Exposure

Weakness CWE-522 · Insufficiently protected credentials

Published February 25, 2025

Last update February 26, 2025

CVSS base score

2.7/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption.

Key dates

February 25, 2025 CVE published

February 26, 2025 Record updated

External resources

Related vulnerabilities