CVE-2025-59784 — Log Pollution - Control Characters Not Escaped

CVE-2025-59784

Log Pollution - Control Characters Not Escaped PUBLISHED

Description (CNA)

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges.

Affected (CNA)

Vendor / product	Versions
2N Telekomunikace a.s. / 2N Access Commander	affected 0 before 3.4.2

CWE

CWE-117

References

https://www.2n.com/en-GB/download/cve_2025_59784_acom_3_5_v1pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.