CVE-2025-59784

Published: Mar 4, 2026Modified: Jun 17, 2026

6.9

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: be69f613-e5f6-419b-800c-30351aa8933c (Secondary)

Description

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.

Affected (1)

Products: 2n: Access Commander

1 product

Access Commander

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
2n Access Commander	Before 3.4.2

Related CWEs

CWE-117

Improper Output Neutralization for Logs

The product does not neutralize or incorrectly neutralizes output that is written to logs.

References (1)

https://www.2n.com/en-GB/download/cve_2025_59784_acom_3_5_v1pdf

Source: be69f613-e5f6-419b-800c-30351aa8933c

Vendor Advisory

Timeline

No history available yet.