5.3
Moyenne
CVE-2025-53884 NeuVector stores user passwords and API keys using a simple, unsalted hash
Description
NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| neuvector 5.0 | 5.0.0 → < 5.4.6 | 5.4.6 |
Autres CVE de neuvector
Les 14 CVE de neuvector →
CVE-2026-78424
Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write)…
8.8
Élevée
CVE-2026-78426
The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field
2.0
Faible
CVE-2026-78428
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving…
8.8
Élevée
CVE-2025-46808
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive…
6.8
Moyenne