CVE-2025-15141

Katalog CVE

CVSS 3.1 · Low EPSS 0,23%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada halo. Skor CVSS 3.1 3.1 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was determined in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator of the component Configuration Handler. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

28 Desember 2025

Terakhir diubah

13 Oktober 2026

Status NVD

Modified

CVSS 3.1

3.1 (Low), sumber vuldb.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-284: Improper Access Control

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.338519 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.715235 advisory pihak ketiga · vdb entry
• https://github.com/SECWG/cve/issues/9 issue tracking
• https://vuldb.com/?ctiid.338519 permissions required · vdb entry