CVE-2025-67860

Summary

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users.

Affected Software

Weaknesses

• CWE-522: CWE-522: Insufficiently Protected Credentials

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67860
• https://github.com/harvester/harvester/security/advisories/GHSA-3c9m-gq32-g4jx

• ←Previous
• Next→