CVE-2025-12491

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12491", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2025-10-29T19:56:56.084Z", "datePublished": "2025-12-23T21:43:02.940Z", "dateUpdated": "2025-12-24T15:38:12.755Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2025-12-23T21:43:02.940Z"}, "title": "Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability", "descriptions": [{"lang": "en", "value": "Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Senstar Symphony. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of FetchStoredLicense method. The issue results from the exposure of sensitive information. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26908."}], "affected": [{"vendor": "Senstar", "product": "Symphony", "versions": [{"version": "8.9.4.0", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1060/", "name": "ZDI-25-1060", "tags": ["x_research-advisory"]}], "dateAssigned": "2025-10-29T19:56:56.140Z", "datePublic": "2025-12-10T17:51:00.000Z", "source": {"lang": "en", "value": "Gert Keldermans & Nabeel Ahmed of NTT Belgium"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-24T15:38:07.564296Z", "id": "CVE-2025-12491", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-24T15:38:12.755Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12491", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-24T15:38:07.564296Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-24T15:38:10.274Z"}}], "cna": {"title": "Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability", "source": {"lang": "en", "value": "Gert Keldermans & Nabeel Ahmed of NTT Belgium"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "Senstar", "product": "Symphony", "versions": [{"status": "affected", "version": "8.9.4.0"}], "defaultStatus": "unknown"}], "datePublic": "2025-12-10T17:51:00.000Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1060/", "name": "ZDI-25-1060", "tags": ["x_research-advisory"]}], "dateAssigned": "2025-10-29T19:56:56.140Z", "descriptions": [{"lang": "en", "value": "Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Senstar Symphony. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of FetchStoredLicense method. The issue results from the exposure of sensitive information. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26908."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2025-12-23T21:43:02.940Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12491", "state": "PUBLISHED", "dateUpdated": "2025-12-24T15:38:12.755Z", "dateReserved": "2025-10-29T19:56:56.084Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2025-12-23T21:43:02.940Z", "assignerShortName": "zdi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Symphony", "vendor": "Senstar", "versions": [{"status": "affected", "version": "8.9.4.0"}]}], "source": "zdi-disclosures@trendmicro.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Senstar Symphony. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of FetchStoredLicense method. The issue results from the exposure of sensitive information. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26908."}, {"lang": "es", "value": "Vulnerabilidad de revelaci\u00f3n de informaci\u00f3n en el m\u00e9todo FetchStoredLicense de Senstar Symphony. Esta vulnerabilidad permite a atacantes remotos revelar informaci\u00f3n sensible en instalaciones afectadas de Senstar Symphony. No se requiere autenticaci\u00f3n para explotar esta vulnerabilidad.\\n\\nEl fallo espec\u00edfico existe dentro de la implementaci\u00f3n del m\u00e9todo FetchStoredLicense. El problema se debe a la exposici\u00f3n de informaci\u00f3n sensible. Un atacante puede aprovechar esta vulnerabilidad para revelar credenciales almacenadas, lo que puede conducir a una mayor compromisi\u00f3n. Fue ZDI-CAN-26908."}], "id": "CVE-2025-12491", "lastModified": "2026-10-19T22:10:00.130", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12491", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-24T15:38:07.564296Z", "version": "2.0.3"}}]}, "published": "2025-12-23T22:15:43.593", "references": [{"source": "zdi-disclosures@trendmicro.com", "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1060/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{"created": "2025-12-24T11:51:58.810459+00:00", "updated": "2025-12-24T11:51:58.810485+00:00", "vendors": ["senstar", "senstar$PRODUCT$symphony"]}