CVE-2025-66001

8.8HIGH

NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by defa

게시됨: 1/8/2026업데이트됨: 1/8/2026
NVD에서 보기MITRE에서 보기

설명

NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.

AI 분석AI 기반

참조