CVE-2025-54467

Upstream information

CVE-2025-54467 at MITRE

Description

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log.

---

Upstream Security Advisories:

• https://github.com/neuvector/neuvector/security/advisories/GHSA-w54x-xfxg-4gxq

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having important severity.

CVSS v3 Scores

	CNA (SUSE)
Base Score	5.3
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality Impact	Low
Integrity Impact	None
Availability Impact	None
CVSSv3 Version	3.1

SUSE Bugzilla entry: 1247842 [RESOLVED / FIXED]

SUSE Security Advisories:

• GHSA-w54x-xfxg-4gxq, published Tue Aug 26 19:00:35 CEST 2025

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE Tumbleweed	govulncheck-vulndb >= 0.0.20250908T141310-1.1	Patchnames: openSUSE-Tumbleweed-2025-15538

---

SUSE Timeline for this CVE

CVE page created: Fri Aug 8 16:30:25 2025
CVE page last modified: Sat Sep 20 18:26:49 2025