VULNERABILITY INTELLIGENCE
CVE-2025-32803
CVSS score4 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-05-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8.
Weakness classification
- security-officer@isc.org: CWE-276