CVE 4.6 MEDIUM

Lack of Encryption in Object Archive in AxxonSoft Axxon One before 2.0.8_CVE-2025-10227

4.6 / 10
MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.

Basic Information

ID CVE-2025-10227
Source AxxonSoft
Published Sep 10, 2025 at 12:39
Modified Sep 10, 2025 at 13:09

Affected Product

Vendor AxxonSoft
Product AxxonOne
Affected Versions AxxonSoft AxxonOne 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.