Threats Tagged 'cve-2025-14823'
View all threats tagged with 'cve-2025-14823'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-14823'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-14823 is a medium severity vulnerability in ConnectWise ScreenConnect when used with the Certificate Signing Extension versions prior to 1.0.12. It involves the unintended exposure of encrypted configuration values, including an Azure Key Vault-related key, to unauthenticated users via a client-facing endpoint. Although the sensitive data remains encrypted and secure at rest, its encrypted form could be leaked in client responses. Exploitation does not require authentication or user interaction, but the impact is limited to confidentiality as integrity and availability are unaffected. Updating the Certificate Signing Extension to version 1.0.12 or higher mitigates the issue by ensuring configuration handling is performed solely on the server side, preventing encrypted values from being sent to clients. European organizations using ScreenConnect with the vulnerable extension should prioritize patching to avoid potential information disclosure. Join the discussion | CVE Database V5 | 12/18/2025, 15:50:06 UTC Added: 12/18/2025, 15:56:29 UTC |
Showing 1 to 1 of 1 result