Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-15624

Plaintext Storage of a Password in Sparx Pro Cloud Server.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-FI

Description

Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server.  In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local passwords to the users and stores them in plaintext.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sparx Systems Pty Ltd. Sparx Pro Cloud Server

Default version status: unknown

  • 6.0.163affected

References