Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

NETSCOUT nGeniusONE stores sensitive credentials in plain text

CVE-2025-32985 · published 1 year ago
Summary

NETSCOUT's nGeniusONE software stores login credentials in a way that can be easily accessed by unauthorized parties. This means attackers may be able to gain access to sensitive areas of the system. To protect your system, update to version 6.4.0 or later, and ensure your credentials are not stored in plain text.

What to do
  • Update netscout ngeniusone to version 6.4.0 or later.
Affected software
VendorProductAffected versions
netscout ngeniusone < 6.4.0
cpe:2.3:a:netscout:ngeniusone:*:*:*:*:*:*:*:*
Original advisory text
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-798Use of Hard-coded Credentials
Timeline
Published25 Apr 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-32985 · NVD
Track software like this
Free during beta