CVE-2025-14432: Poly Video - Sensitive Data Might Be Written to Log File
In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14432?
CVE-2025-14432 is classified as a low severity vulnerability.
How do I fix CVE-2025-14432?
To mitigate CVE-2025-14432, ensure that sensitive data is not logged during device configuration changes in the Microsoft Teams Admin Center.
Who is affected by CVE-2025-14432?
CVE-2025-14432 affects administrators using the Microsoft Teams Admin Center to make device configuration changes.
What type of data is at risk in CVE-2025-14432?
In CVE-2025-14432, sensitive data may inadvertently be written to the log file.
Is CVE-2025-14432 a widespread issue?
CVE-2025-14432 is limited to specific scenarios within the Microsoft Teams Admin Center and does not affect all users.