VULNERABILITY INTELLIGENCE

CVE-2025-54876

CVSS score6.9 MEDIUM

EPSS probability0.51%

CISA KEVNot currently listed

Published2025-08-06

Last modified2026-06-17

Description

The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease.