CVE-2025-59868 is a CWE-532 vulnerability in HCL Traveler for Microsoft Outlook that results in the insertion of sensitive information into log files. This sensitive data exposure could be leveraged by an attacker with local access to gather information about the application, which might be used to attempt additional attacks or cause unknown application behavior. The vulnerability affects versions prior to 3.0.15. The CVSS 3.1 base score is 5.5 (medium severity), with a local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. There is no vendor advisory or patch information available at this time.

The vulnerability allows sensitive information to be exposed via log files, which could be accessed by an attacker with local access. This exposure compromises confidentiality but does not affect integrity or availability of the application. The disclosed CVSS score reflects a medium severity impact primarily due to confidentiality loss. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to systems running affected versions of HCL Traveler for Microsoft Outlook to trusted users only and monitor for any suspicious activity related to log file access.