CVE-2025-54467

CWE-522 — Insufficiently Protected CredentialsCWE-5495 documents4 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 86.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Suse NeuvectorGithub.com Neuvector/neuvector
Timeline
PublishedSep 17

Description

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5suse/neuvector5.0.0 — 5.4.6
▶Gogithub.com/neuvector/neuvector5.0.0 — 5.4.6

🔴Vulnerability Details

4
CVEList
NeuVector process with sensitive arguments lead to leakage↗2025-09-17
▶
OSV
NeuVector process with sensitive arguments lead to leakage in github.com/neuvector/neuvector↗2025-09-08
▶
GHSA
NeuVector process with sensitive arguments lead to leakage↗2025-08-28
▶
OSV
NeuVector process with sensitive arguments lead to leakage↗2025-08-28
▶
CVE-2025-54467 (MEDIUM CVSS 5.3) | When a Java command with password p | cvebase.io