CVE-2025-54781
BaseFortify
Publication date: 2025-08-02
Last updated on: 2025-08-04
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| himmelblau | himmelblau | * |
| himmelblau | himmelblau | 1.0.0 |
| himmelblau | himmelblau | 1.1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-532 | The product writes sensitive information to a log file. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in Himmelblau version 1.0.0 when debugging is enabled. The himmelblaud_tasks service leaks an Intune service access token to the system journal. This token is short-lived but can be used to detect the host's Intune compliance status and may allow additional administrative operations on the Intune host device, although the API for these operations is undocumented. The issue is fixed in version 1.1.0, and disabling debugging is a workaround.
How can this vulnerability impact me? :
The vulnerability can impact you by exposing a short-lived Intune service access token through the system journal. This token can be used to determine the Intune compliance status of the host and potentially perform additional administrative operations on the Intune host device, which could lead to unauthorized access or control.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking if the himmelblaud_tasks service is leaking an Intune service access token to the system journal when debugging is enabled. You can inspect the system journal logs for the presence of such tokens. For example, use the command: `journalctl -u himmelblaud_tasks | grep token` to search for leaked tokens in the logs.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability immediately, ensure that Himmelblau debugging is disabled. Additionally, upgrade Himmelblau to version 1.1.0 or later where this issue is fixed.