Password Exposure in NeuVector's Security Logging Mechanism

CVE-2025-54467

What is CVE-2025-54467?

An issue within NeuVector allows sensitive password information to be logged in the security event log when a Java command containing password parameters is executed. If this command is interrupted due to a process rule violation, the password may be exposed within these logs, leading to potential security risks. Organizations leveraging NeuVector should assess their logging configuration and ensure sensitive information is adequately protected to prevent unauthorized access.

References