CVE-2025-1308

HIGH

Pure Storage PX Backup 1.0.0-2.5.9, 2.7.0-2.7.2, 2.8.0 - Information Exposure via Logging

Title source: llm
STIX 2.1

Description

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions.

References (1)

Core 1
Core References

Scores

CVSS v4 8.4
EPSS 0.0014
EPSS Percentile 3.3%
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-116
Status published
Products (3)
Pure Storage/PX Backup 1.0.0 - 2.6.0
Pure Storage/PX Backup 2.7.0 - 2.7.3
Pure Storage/PX Backup 2.8.0 - 2.8.1
Published May 19, 2025
Tracked Since Feb 18, 2026