Skip to content
OpenAdvisories
Medium · 4.9 CVE-2025-64299 EUVD-2025-198424GHSA-7jcw-93c6-pr83

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.

Published Nov 21, 2025 · Updated Nov 21, 2025 · Assigned by jpcert

Vendor: LogStare Product: LogStare Collector (for Linux) Product: LogStare Collector (for Windows) Platform: Linux Platform: Windows

Description

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.

Affected products

VendorProductAffectedFixed
LogStare LogStare Collector (for Windows) 2.4.1 and earlier —
LogStare LogStare Collector (for Linux) 2.4.1 and earlier —

References