Medium severity · published Dec 22, 2025
CVE-2025-8305
Information Disclosure in Identity Agent Debug Files
6.5
CVSS
0.1%
EPSS
No
On KEV
Description
An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Identity Awareness · checkpoint
Check Point Identity Agent Multi User Host Agent under version 81.084.0000 · source: vendor