Description (CNA)
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / NeuVector | affected 0 through 5.4.9 |
CWE
CWE-306, CWE-524, CWE-202
References
- https://github.com/neuvector/manager/security/advisories/GHSA-hx45-873x-74qv
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25703
ADP enrichment
No English description supplied.
No references supplied.