attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
suse neuvector
Classified as
CWE-202 (Exposure of Sensitive Information Through Data Queries)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
suse
neuvector
Subsystems
General OT
Sectors
Multiple
What to Know
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.
What to Do
Monitor suse's web page for any future patch releases.