Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/12/19 4:23 p.m.12 views

CVE-2025-14823

In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values remained encrypted and securely stored a...

5.3CVSS6.8AI score0.00133EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/18 6:30 p.m.4 views

EUVD-2025-204299

In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values remained encrypted and securely stored a...

5.3CVSS6.3AI score0.00133EPSS
Exploits0References2
NVD
NVD
added 2025/12/18 4:15 p.m.5 views

CVE-2025-14823

In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values remained encrypted and securely stored a...

5.3CVSS0.00133EPSS
Exploits0References1
OSV
OSV
added 2025/12/18 4:15 p.m.3 views

CVE-2025-14823

In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values remained encrypted and securely stored a...

5.3CVSS5.8AI score0.00133EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 3:50 p.m.11 views

CVE-2025-14823

The CVE-2025-14823 issue affects ConnectWise ScreenConnect’s Certificate Signing Extension. Affected: Certificate Signing Extension prior to version 1.0.12. Description across sources shows that encrypted configuration values, including an Azure Key Vault-related key, could be exposed in client r...

5.3CVSS6.4AI score0.00133EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 3:50 p.m.7 views

CVE-2025-14823 Certificate Signing Extension Returns Encrypted Values

In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values remained encrypted and securely stored a...

5.3CVSS6.4AI score0.00133EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.4 views

ConnectWise ScreenConnect 安全漏洞

ConnectWise ScreenConnect is a self-hosted remote desktop software application from ConnectWise. A security vulnerability exists in ConnectWise ScreenConnect that stems from mishandling of the certificate signing extension configuration, which could lead to the disclosure of encrypted configurati...

5.3CVSS6.5AI score0.00133EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.5 views

PT-2025-52259

Name of the Vulnerable Software and Affected Versions ScreenConnect versions prior to 1.0.12 Description In deployments utilizing the Certificate Signing Extension, encrypted configuration values, potentially including an Azure Key Vault-related key, could be disclosed to unauthenticated users vi...

5.3CVSS6.7AI score0.00133EPSS
Exploits0References4
Rows per page
Query Builder