CVE-2025-15624 — Plaintext Storage of a Password in Sparx Pro Cloud Server.

CVE-2025-15624

Plaintext Storage of a Password in Sparx Pro Cloud Server. PUBLISHED

Description (CNA)

Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local passwords to the users and stores them in plaintext.

Affected (CNA)

Vendor / product	Versions
Sparx Systems Pty Ltd. / Sparx Pro Cloud Server	affected 6.0.163

CWE

CWE-256

References

https://sparxsystems.com/products/procloudserver/6.1/history.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.