CVE-2025-14758

Initialization of a Resource with an Insecure Default in YAOOK PUBLISHED

Description (CNA)

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials

Affected (CNA)

Vendor / product	Versions
ALASCA / YAOOK	affected 0.20240809.0 before 0.20251211.0

CWE

CWE-1188

References

https://gitlab.com/yaook/operator/-/issues/631

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.