Product:
Active Directory Federation Services
Summary
Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally. This vulnerability can lead to the exposure of sensitive data, which could be exploited by malicious actors. It is crucial for organizations to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2025-59258 |
Exploitation
An attacker with local access can exploit this vulnerability by accessing the log files generated by Active Directory Federation Services. By reviewing these logs, the attacker may find sensitive information that should not be disclosed. This could include credentials or other confidential data, which can be used for further attacks.
Affected Products
- Active Directory Federation Services: Vulnerable to information disclosure due to sensitive data being logged improperly.
Mitigation
To mitigate this vulnerability, organizations should ensure that log files do not contain sensitive information. Regular audits of log file content and implementing proper logging practices can help prevent unauthorized access to sensitive data. Additionally, restricting local access to systems running Active Directory Federation Services can reduce the risk of exploitation.