CVE-2025-2489 — Insecure storage of sensitive information in NTFS Tool
Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /U…
Published: 2025-03-18 · CVSS: 6.8 · CVSS 4.0
Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /Users/user/Library/Application Support/ntfs-tool/config.json.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7