Avantra Insertion of Sensitive Information into Log File Vulnerability

A vulnerability exists in Avantra prior to version 25.3.0 for both Linux and Windows platforms, allowing the insertion of sensitive information into log files. This issue can lead to resource leak exposure.

Impact

This vulnerability has a high impact on integrity, allowing unauthorized modification of log file contents, and a low impact on confidentiality and availability.

Remediation

Users are advised to upgrade to Avantra version 25.3.x. Additionally, it is recommended to review the permissions of the Avantra Agent user and the Avantra UI, ensuring that non-administrative users do not have the 'Download Agent Log Files' permission.