CVE-2025-53884
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-17

Last updated on: 2025-09-17

Assigner: SUSE

Description
NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed).
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-17
Last Modified
2025-09-17
Generated
2026-06-16
AI Q&A
2025-09-17
EPSS Evaluated
2026-06-15
NVD
CVE-2025-53884
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
neuvector neuvector 5.4.6
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-759 The product uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

NeuVector stores user passwords and API keys using a simple, unsalted hash. This weak hashing method makes it vulnerable to rainbow table attacks, where attackers use precomputed hashes of common passwords to reverse the stored hashes and recover the original passwords or keys.

Impact Analysis

This vulnerability can lead to unauthorized access if an attacker obtains the hashed passwords or API keys and successfully uses rainbow table attacks to recover them. This compromises user credentials or API keys, potentially allowing attackers to access systems or data without permission.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-53884. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart