CVE-2025-54768 — KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information
An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used…
Published: 2025-07-28 · CVSS: 5.3 · CVSS 3.1
An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7