What is the CVSS score of EUVD-2025-24573?

EUVD-2025-24573 has a CVSS 3.1 base score of 2.7 (Low). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Debian are affected by EUVD-2025-24573?

CVE-2025-5416 is a low-severity vulnerability in A vulnerability (CVSS 2.7). The limited severity suggests constrained impact, typically requiring specific conditions or local access for…

How to fix or mitigate EUVD-2025-24573?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Debian EUVD-2025-24573

| CVE-2025-5416 LOW

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497)

2025-06-20 secalert@redhat.com

Information Disclosure Debian

2.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.7 LOW

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 00:19 euvd

EUVD-2025-24573

Analysis Generated

Mar 15, 2026 - 00:19 vuln.today

CVE Published

Jun 20, 2025 - 16:15 nvd

LOW 2.7

DescriptionCVE.org

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information.

Analysis

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls.