CVE-2025-2489 — Insecure storage of sensitive information in NTFS Tool

CVE-2025-2489

Insecure storage of sensitive information in NTFS Tool PUBLISHED

Description (CNA)

Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /Users/user/Library/Application Support/ntfs-tool/config.json.

Affected (CNA)

Vendor / product	Versions
NTFS Tool / Ntfs tool	affected 3.5.1

CWE

CWE-922

References

https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-storage-sensitive-information-ntfs-tool

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.