CVE-2025-59868 is a CWE-532 vulnerability affecting HCL Traveler for Microsoft Outlook. It involves the insertion of sensitive information into log files, which could be accessed by an attacker with local privileges. The vulnerability has a CVSS 3.1 base score of 5.5, reflecting a medium severity with high confidentiality impact but no impact on integrity or availability. The affected versions are all releases before 3.0.15. There is no vendor advisory or patch information available to confirm remediation status.

The vulnerability exposes sensitive information through application log files, which could be leveraged by an attacker with local access to gain insights into the application environment. This exposure compromises confidentiality but does not affect the integrity or availability of the application. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local access to systems running affected versions and restrict permissions on log files to prevent unauthorized reading of sensitive data.