CVE-2025-32803

Insecure file permissions can result in confidential information leakage PUBLISHED

Description (CNA)

In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.

Affected (CNA)

Vendor / product	Versions
ISC / Kea	affected 2.4.0 through 2.4.1; affected 2.6.0 through 2.6.2; affected 2.7.0 through 2.7.8

CWE

CWE-276

References

https://kb.isc.org/docs/cve-2025-32803

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.