CVE-2025-14376

Insecure Storage of Sensitive Information (CWE-922)

2026-01-20 PSIRT@rockwellautomation.com

Information Disclosure

Lifecycle Timeline

2

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 20, 2026 - 14:16 nvd

N/A

DescriptionCVE.org

A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.

Analysis

A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.

Technical ContextAI

Classified as CWE-922 (Insecure Storage of Sensitive Information). A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.

Affected ProductsAI

Component: legacy ADI server.

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-922 – Insecure Storage of Sensitive Information

View all

CVE-2023-29727 CRITICAL POC

CVE-2021-27170 CRITICAL POC

CVE-2017-7253 HIGH POC

CVE-2025-28244 HIGH POC

CVE-2025-46627 HIGH POC

CVE-2024-22773 HIGH POC

CVE-2023-32184 HIGH POC

CVE-2023-29757 HIGH POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2025-14376 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy