CVE-2025-64299: Medium severity Secuavail Logstare Collector vulnerability
Published Nov 21, 2025
·Updated
LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.
Affected Software
3 affected components
All of the following
Secuavail Logstare Collector<2.4.2
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Nov 21, 2025
CVE Published
via MITRE·06:18 AM
Data Sourced
via MITRE·06:18 AM
DescriptionSeverity
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-64299?
CVE-2025-64299 is considered a high severity vulnerability due to improper handling of password hash data.
2
How do I fix CVE-2025-64299?
To fix CVE-2025-64299, upgrade the LogStare Collector software to version 2.4.2 or later.
3
What impacts does CVE-2025-64299 have on users?
CVE-2025-64299 allows administrative users to potentially access other users' password hashes, compromising security.
4
Which software versions are affected by CVE-2025-64299?
CVE-2025-64299 affects all versions of Secuavail LogStare Collector prior to 2.4.2.
5
Is Linux or Windows vulnerable to CVE-2025-64299?
No, Linux and Windows operating systems are not vulnerable as the issue resides within the LogStare Collector software.