Description
Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a low- privileged account is required to access the configuration file containing the sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Kiwi Syslog NG | Kiwi 1.3 and previous versions | — |
Advisories 1
- WID-SEC-2025-0310 SolarWinds Kiwi Syslog Server: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Feb 10, 2025