CVE-2025-54467

MEDIUM

Neuvector < 5.4.6 - Insufficiently Protected Credentials

Title source: rule

Description

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log.

References (2)

Scores

CVSS v3 5.3
EPSS 0.0004
EPSS Percentile 12.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-522
Status draft

Affected Products (1)

neuvector/neuvector < 5.4.6Go

Timeline

Published Sep 17, 2025
Tracked Since Feb 18, 2026