Microsoft Windows Failover Cluster Information Disclosure Vulnerability

A vulnerability exists in Windows Failover Cluster that allows an authorized attacker to locally disclose sensitive information by inserting it into a log file. This issue affects several versions of Windows Server 2025 and Windows Server 2022, 23H2 Edition (Server Core installation).

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, including cleartext passwords, from system logs on the affected server.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. After applying the update, it is recommended to change passwords to mitigate any risks from previously exposed credentials.