CVE-2025-58107
In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, includi…
Published: 2026-03-02 · CVSS: 7.5 · CVSS 3.1
In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7