What the vulnerability does
01Description
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by unauthorized users.
CVSS base score
4.3/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Key dates
02Disclosure timeline
March 10, 2025
CVE published
March 11, 2025
Record updated
External resources
