Medium severityNVD Advisory· Published Mar 18, 2025· Updated Apr 15, 2026

CVE-2025-2489

Description

Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow an attacker to know the application password, stored in /Users/user/Library/Application Support/ntfs-tool/config.json.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NTFS Tools/NTFS Toolsllm-create
Range: =3.5.1

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/insecure-storage-sensitive-information-ntfs-toolnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000