Password and API Key Storage Vulnerability in NeuVector by NeuVector
CVE-2025-53884
5.3MEDIUM
What is CVE-2025-53884?
NeuVector has a security vulnerability related to the storage of user passwords and API keys, where they are saved using a basic, unsalted hash. This technique significantly increases the risk of rainbow table attacks, enabling unauthorized access to sensitive data as attackers can exploit precomputed hash values to crack passwords easily.
Affected Version(s)
neuvector 5.0.0 < 5.4.6