VULNERABILITY INTELLIGENCE

CVE-2025-14432

CVSS score8.1 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-12-16
Last modified2026-10-07
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Description

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File

Primary references