CVE-2025-7203: CWE-312: Cleartext Storage of Sensitive Information in WSO2 WSO2 Universal Gateway

The vulnerability CVE-2025-7203 in WSO2 Universal Gateway involves cleartext storage of sensitive information including remote log server credentials, truststore passwords, and keystore passwords. This occurs because the system does not adequately protect or obscure these credentials when remote logging is enabled. An attacker with administrative access to the Management Console or direct access to product files can extract these credentials, enabling potential manipulation of log entries and compromising the confidentiality and integrity of the remote log server. The CVSS v3.1 score is 4.9 (medium severity), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and impact on confidentiality but not integrity or availability.

The exposure of sensitive credentials in cleartext allows an attacker with administrative or file access to retrieve remote log server credentials and passwords. This can lead to unauthorized access to the remote log server, manipulation of log entries, and compromise of the confidentiality and integrity of logging data. There is no direct impact on availability or integrity of the WSO2 Universal Gateway itself, but the logging infrastructure's security is weakened.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative and file system access to trusted personnel only. Disable the remote logging feature if not required or ensure that credentials are stored securely by following vendor best practices once available.