CVE-2025-66001

8.8HIGH

NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by defa

Veröffentlicht: 1/8/2026Aktualisiert: 1/8/2026
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.

KI-AnalyseKI-gestützt

Referenzen