CVE Vulnerabilities

CVE-2025-24457

Insertion of Sensitive Information into Log File

Published: Jan 21, 2025 | Modified: Jan 30, 2025

CVSS 3.x

5.5

MEDIUM

Source:

NVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Vulnerability-free packages from our partners

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-24457
CWE	https://cwe.mitre.org/data/definitions/532.html

In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs

Weakness

The product writes sensitive information to a log file.

Affected Software

Name	Vendor	Start Version	End Version
Youtrack	Jetbrains	*	2024.3.55417 (excluding)

Potential Mitigations

https://cwe.mitre.org/data/definitions/215.html

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Aqua Container Security