CVE-2025-64299 MEDIUM

CVE-2025-64299

Vendor Logstare Inc.
Product LogStare Collector (for Windows)
Weakness CWE-201
Published November 21, 2025
Last update November 21, 2025
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.

Key dates

02Disclosure timeline

November 21, 2025 CVE published
November 21, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-49082 WordPress Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons plugin <= 1.4.8 - Sensitive Data Exposure vulnerability CVE-2022-0018 GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled CVE-2025-27001 WordPress Shipmondo – A complete shipping solution for WooCommerce plugin <= 5.0.3 - Authenticated Arbitrary WordPress Option Disclosure vulnerability CVE-2025-53998 WordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure Vulnerability CVE-2025-62308 HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed