QwikSec

Security Database

CVE

CWE

Training

CVE-2025-54768

Published: Jul 28, 2025

Modified: Nov 3, 2025

PUBLISHED

Description

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

Vendor	Product	Versions
Xorux	LPAR2RRD	affected `8.04`

Weaknesses (CWE)

References

https://korelogic.com/Resources/Advisories/KL-001-2025-015.txt

third-party-advisory

https://lpar2rrd.com/note800.php

release-notes

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.