CVE-2025-52493

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-52493", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-12-11T16:07:44.875Z", "dateReserved": "2025-06-17T00:00:00.000Z", "datePublished": "2025-12-10T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-12-10T16:59:45.646Z"}, "descriptions": [{"lang": "en", "value": "PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from \"password\" to \"text\" using browser developer tools. This vulnerability is exploitable by administrative users who have access to the configuration page."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.praetorian.com"}, {"url": "https://www.pagerduty.com/security/disclosure/"}, {"url": "https://www.pagerduty.com/platform/automation/"}, {"url": "https://github.com/carterross2/Vulnerability-Research/tree/main/CVE-2025-52493"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-12-11T16:06:28.083070Z", "id": "CVE-2025-52493", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-11T16:07:44.875Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-52493", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-11T16:06:28.083070Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-11T16:07:13.489Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://www.praetorian.com"}, {"url": "https://www.pagerduty.com/security/disclosure/"}, {"url": "https://www.pagerduty.com/platform/automation/"}, {"url": "https://github.com/carterross2/Vulnerability-Research/tree/main/CVE-2025-52493"}], "descriptions": [{"lang": "en", "value": "PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from \"password\" to \"text\" using browser developer tools. This vulnerability is exploitable by administrative users who have access to the configuration page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-12-10T16:59:45.646Z"}}}, "cveMetadata": {"cveId": "CVE-2025-52493", "state": "PUBLISHED", "dateUpdated": "2025-12-11T16:07:44.875Z", "dateReserved": "2025-06-17T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2025-12-10T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:pagerduty:runbook_automation:*:*:*:*:*:*:*:*", "matchCriteriaId": "9AE4D0D6-E780-4B51-BF95-63CD6E1D3542", "versionEndIncluding": "2025-06-12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from \"password\" to \"text\" using browser developer tools. This vulnerability is exploitable by administrative users who have access to the configuration page."}, {"lang": "es", "value": "PagerDuty Runbook hasta 2025-06-12 expone secretos almacenados directamente en el DOM de la p\u00e1gina web en la p\u00e1gina de configuraci\u00f3n. Aunque estos secretos aparecen enmascarados como campos de contrase\u00f1a, los valores reales de los secretos est\u00e1n presentes en el c\u00f3digo fuente de la p\u00e1gina y pueden revelarse simplemente modificando el tipo del campo de entrada de \u201cpassword\u201d a \u201ctext\u201d usando las herramientas de desarrollo del navegador. Esta vulnerabilidad es explotable por usuarios administrativos que tienen acceso a la p\u00e1gina de configuraci\u00f3n."}], "id": "CVE-2025-52493", "lastModified": "2026-11-04T22:10:00.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-52493", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-11T16:06:28.083070Z", "version": "2.0.3"}}]}, "published": "2025-12-10T17:15:53.693", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/carterross2/Vulnerability-Research/tree/main/CVE-2025-52493"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.pagerduty.com/platform/automation/"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.pagerduty.com/security/disclosure/"}, {"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "https://www.praetorian.com"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"created": "2025-12-10T21:33:04.916348+00:00", "updated": "2025-12-10T21:33:04.916397+00:00", "vendors": ["pagerduty", "pagerduty$PRODUCT$runbook"]}