5.3
Medium
CVE-2025-53884 NeuVector stores user passwords and API keys using a simple, unsalted hash
Description
NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| neuvector 5.0 | 5.0.0 → < 5.4.6 | 5.4.6 |
Other CVEs of neuvector
The 14 CVEs of neuvector →
CVE-2026-78424
Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write)…
8.8
High
CVE-2026-78426
The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field
2.0
Low
CVE-2026-78428
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving…
8.8
High
CVE-2025-46808
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive…
6.8
Medium