VulnerabilityAwaiting Analysis

CVE-2025-46808

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5.

MEDIUM 6.8EPSS 0.20%

Does this matter?

Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.

Description

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5.

CVSS 3.1: 6.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
EPSS: 0.20% probability · 10th percentile
CISA KEV: Not listed
Weakness: CWE-532
Source: meissner@suse.de

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46808
https://github.com/neuvector/manager/security/advisories/GHSA-fggw-hv56-8m6r

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.