CVE-2025-66001

8.8HIGH

NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by defa

Опубликовано: 1/8/2026Обновлено: 1/8/2026
Посмотреть на NVDПосмотреть на MITRE

Описание

NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.

ИИ-АнализНа базе ИИ

Ссылки