CVE-2025-15623 — Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

CVE-2025-15623

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user PUBLISHED

Description (CNA)

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations

Affected (CNA)

Vendor / product	Versions
Sparx Systems Pty Ltd. / Sparx Pro Cloud Server	affected 6.0.163

CWE

CWE-359, CWE-497

References

https://sparxsystems.com/products/procloudserver/6.1/history.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.