VULNERABILITY INTELLIGENCE

CVE-2025-2489

EPSS probability0.17%
CISA KEVNot currently listed
Published2025-03-18
Last modified2026-06-17

Description

Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /Users/user/Library/Application Support/ntfs-tool/config.json.

Weakness classification

  • cve-coordination@incibe.es: CWE-922

Primary references