CVE-2025-71261

Harvester's SUSE Virtualization Registration Client Vulnerable to MITM and DOS PUBLISHED

Description (CNA)

An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it to bypass TLS as a security control.

Affected (CNA)

Vendor / product	Versions
SUSE / Harvester	affected 0 before 1.8

CWE

CWE-295

References

https://github.com/harvester/harvester/security/advisories/GHSA-pgh9-mpwc-8jjf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.