WSO2 Identity Server: Credential Exposure via PlainText Logs
CVE-2025-7203 Published on October 19, 2026
Sensitive Information Disclosure via Management Console and Product Files in Multiple WSO2 Products Allows Retrieval of Credentials
The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because the system does not sufficiently protect or obscure these credentials when the remote logging feature is enabled.
An attacker with administrative access to the Management Console or direct access to product files can retrieve these sensitive credentials. This allows for potential manipulation of log entries and compromise of the integrity and confidentiality of the remote log server.
Vulnerability Analysis
CVE-2025-7203 can be exploited with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Cleartext Storage of Sensitive Information
The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere. Because the information is stored in cleartext, attackers could potentially read it. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.
Products Associated with CVE-2025-7203
Want to know whenever a new CVE is published for Wso2 products? stack.watch will email you.
Affected Versions
WSO2 Universal Gateway:- Before 4.5.0 is unknown.
- Version 4.5.0 and below 4.5.0.46 is affected.
- Version 4.6.0 and below 4.6.0.14 is affected.
- Before 4.5.0 is unknown.
- Version 4.5.0 and below 4.5.0.45 is affected.
- Version 4.6.0 and below 4.6.0.14 is affected.
- Before 4.5.0 is unknown.
- Version 4.5.0 and below 4.5.0.47 is affected.
- Version 4.6.0 and below 4.6.0.15 is affected.
- Before 4.3.0 is unknown.
- Version 4.3.0 and below 4.3.0.97 is affected.
- Version 4.4.0 and below 4.4.0.61 is affected.
- Version 4.5.0 and below 4.5.0.46 is affected.
- Version 4.6.0 and below 4.6.0.14 is affected.
- Before 7.0.0 is unknown.
- Version 7.0.0 and below 7.0.0.111 is affected.
- Version 7.1.0 and below 7.1.0.19 is affected.
- Version 4.9.11 and below 4.9.11.4 is affected.
- Version 4.9.18 and below 4.9.18.2 is affected.
- Version 4.10.9 and below 4.10.9.2 is affected.
- Version 4.10.19 and below 4.10.19.1 is affected.
- Version 4.9.11 and below 4.9.11.4 is affected.
- Version 4.9.18 and below 4.9.18.2 is affected.
- Version 4.10.9 and below 4.10.9.2 is affected.
- Version 4.10.19 and below 4.10.19.1 is affected.
- Version x, <= * is unaffected.
- Version 1.2.176 and below 1.2.176.16 is affected.
- Version 1.3.83 and below 1.3.83.7 is affected.