CVE-2025-53884

Summary

NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed).

Affected Software

Weaknesses

• CWE-759: CWE-759: Use of a One-Way Hash without a Salt

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53884
• https://github.com/neuvector/neuvector/security/advisories/GHSA-8ff6-pc43-jwv3

• ←Previous
• Next→