CVE-2025-7204

In ConnectWise PSA versions older than 2025.9, avulnerability exists where authenticated users could gain access to sensitiveuser information. Specific API requests were found to return an overly verboseuser object, which included encrypted password hashes for other users.Authenticated users could ...