CVE-2025-1308

HIGH

PX Backup - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions.

References (1)

Scores

CVSS v4 8.4
EPSS 0.0009
EPSS Percentile 24.7%
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-116
Status published
Products (3)
Pure Storage/PX Backup 1.0.0 - 2.6.0
Pure Storage/PX Backup 2.7.0 - 2.7.3
Pure Storage/PX Backup 2.8.0 - 2.8.1
Published May 19, 2025
Tracked Since Feb 18, 2026