CVE-2025-15623: Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user
Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server.
Unauthenticated user can retrieve database password in plaintext in certain situations
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15623?
CVE-2025-15623 is classified as a high severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2025-15623?
To remediate CVE-2025-15623, ensure that unauthorized users cannot access the Sparx Pro Cloud Server by implementing proper authentication measures.
What information is exposed by CVE-2025-15623?
CVE-2025-15623 exposes sensitive personal information and system information to unauthenticated users.
Who is affected by CVE-2025-15623?
Users of Sparx Systems Pro Cloud Server are affected by CVE-2025-15623.
Can CVE-2025-15623 be exploited remotely?
Yes, CVE-2025-15623 can be exploited remotely by an unauthorized user if proper security controls are not in place.