Product:
Windows ETL Channel
Summary
Insertion of sensitive information into log file in Windows ETL Channel allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive data stored in log files. Attackers with local access can exploit this issue to gain insights into system operations.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-59197 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system where the Windows ETL Channel is running. By manipulating the log files, the attacker can insert sensitive information, which can then be accessed by unauthorized users. This requires low privileges, making it easier for attackers to exploit the vulnerability if they have any level of access to the system.
Affected Products
- Windows ETL Channel: Vulnerable to sensitive information disclosure due to improper logging practices.
Mitigation
To mitigate this vulnerability, it is recommended to review and secure log file access permissions. Ensure that only authorized users have access to sensitive log files and consider implementing additional logging controls to prevent unauthorized information disclosure.