Description (CNA)
NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / neuvector | affected 5.0.0 before 5.4.6 |
CWE
CWE-759
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53884
- https://github.com/neuvector/neuvector/security/advisories/GHSA-8ff6-pc43-jwv3
ADP enrichment
No English description supplied.
No references supplied.