Password and API Key Storage Vulnerability in NeuVector by NeuVector
CVE-2025-53884

5.3MEDIUM

Key Information:

Vendor

Suse
Status
Neuvector
Vendor
CVE Published:
17 September 2025

What is CVE-2025-53884?

NeuVector has a security vulnerability related to the storage of user passwords and API keys, where they are saved using a basic, unsalted hash. This technique significantly increases the risk of rainbow table attacks, enabling unauthorized access to sensitive data as attackers can exploit precomputed hash values to crack passwords easily.

Affected Version(s)

neuvector 5.0.0 < 5.4.6

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53884
https://github.com/neuvector/neuvector/security/advisorie...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.