PT-2025-52541 · Delphix · Delphix Continuous Compliance

Published 2025-12-20 · Updated 2025-12-22 · CVE-2025-14591

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Delphix Continuous Compliance versions 2025.3.0 and above

Description An issue exists due to incorrect handling of End-of-Record (EOR) characters in delimited files. Specifically, an incorrect EOR configuration can lead to inaccurate parsing, potentially resulting in personally identifiable information (PII) remaining unmasked. This issue was identified after a bug fix intended to correctly handle CR+LF (Windows and DOS) EOR characters.

Recommendations Ensure the EOR configuration is accurate to prevent inaccurate parsing and the potential exposure of PII.

Fix

DoS

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-14591

Affected Products

Delphix Continuous Compliance

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-14591 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14591 · Vendor Advisory
• https://portal.perforce.com/s/cve/a91Qi000002fThdIAE/pii-leak-due-to-change-in-eor-handling · Vendor Advisory
• https://portal.perforce.com/s/article/TB137 · Vendor Advisory
• https://t.me/cveNotify/146442 · Telegram Post
• https://t.me/cveNotify/146445 · Telegram Post
• https://t.me/cveNotify/146548 · Telegram Post
• https://twitter.com/CVEnew/status/2002466755852095713 · Twitter Post
• https://t.me/CVEtracker/40327 · Telegram Post