Product:
Windows Failover Cluster
Summary
Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive data stored in log files. Attackers with local access can exploit this issue to gain insights into the system’s operations.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-47979 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system running Windows Failover Cluster. By accessing the log files, the attacker can retrieve sensitive information that should not be disclosed. This requires low privileges, making it easier for an authorized user to exploit the vulnerability without needing elevated permissions.
Affected Products
- Windows Failover Cluster: A clustering feature in Windows Server that allows multiple servers to work together to provide high availability for applications and services.
Mitigation
To mitigate this vulnerability, it is recommended to restrict access to log files and ensure that only authorized personnel can view sensitive information. Regularly reviewing and auditing log file access can help identify any unauthorized attempts to access sensitive data.