medium5.5
CVE-2024-25654
Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application serv…
Impact
Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avsystem | Unified Management Platform | Version 23.07.0.16567 |