Nixpkgs security tracker
Permalink
CVE-2025-67860
3.8 LOW
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): CHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): NONE
- Availability impact (A): NONE
Activity log
- Created suggestion
NeuVector scanner insecurely handles passwords as command arguments
A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users.
References
Affected products
github.com/neuvector/scanner
- <4.072
Package maintainers
-
@c0bw3b Renaud <c0bw3b@gmail.com>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@treemo Matthieu Chevrier <matthieu.chevrier@treemo.fr>