CVE-2025-15624: Plaintext Storage of a Password in Sparx Pro Cloud Server.

Published Apr 17, 2026

Updated

Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local passwords to the users and stores them in plaintext.

Affected Software

2 affected components

Sparx Systems Pro Cloud Server

Sparxsystems Pro Cloud Server=6.0.163

Event History

Apr 17, 2026

CVE Published

via MITRE·08:38 AM

Data Sourced

via MITRE·08:38 AM

DescriptionWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-15624?

CVE-2025-15624 is classified as a high severity vulnerability due to the risk of plaintext password exposure.

How do I fix CVE-2025-15624?

To fix CVE-2025-15624, ensure that passwords are stored securely using proper hashing techniques in your Sparx Pro Cloud Server configurations.

What does CVE-2025-15624 affect?

CVE-2025-15624 affects the Sparx Systems Pro Cloud Server software when using OpenID for authentication.

Can CVE-2025-15624 lead to unauthorized access?

Yes, CVE-2025-15624 can lead to unauthorized access if an attacker obtains the plaintext passwords stored by Sparx Pro Cloud Server.

Is a workaround available for CVE-2025-15624?

Currently, a specific workaround for CVE-2025-15624 is not documented, but it is recommended to update the software to the latest version.