Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in...
0.68github-advisories · v1 · published 11/3/2026, 9:31:45 AM · modified 11/3/2026, 9:31:53 AM · TLP:CLEAR
ai.agentoffsec.vulnerability
Source evidence ↗Entities
cwe: CWE-532ghsa: GHSA-87vx-w47q-9fj9cve: CVE-2026-121023
Assessment
Fact summary
low · heuristicInsertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account via WARNING-level log entries that contain serialized user synchronization data.
Technical delta
low · heuristicAutomated delta unavailable (heuristic mode).
Defensive significance
low · heuristicNone identified (heuristic mode).
Extracted text
Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Linux allows a local attacker with read access to ARP Agent log files or support packages to obtain the plaintext password of the LDAP directory service account via WARNING-level log entries that contain serialized user synchronization data.