← Back

CVE-2025-6571

nvd nist
Published: Nov 11, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
6.0
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
Exploitability: 0.5 / Impact: 5.5
Source: product-security@axis.com (Secondary)

Description

A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

Source: product-security@axis.com

Timeline

No history available yet.