{"id":"CVE-2025-62877","revision":"1fd80f79ce79445a977663b3572319ed","records":[{"revision":"1fd80f79ce79445a977663b3572319ed","observedAt":"2026-10-25T03:17:29.935+00:00","statement":{"source":"nvd","id":"CVE-2025-62877","aliases":[],"title":"Projects using the SUSE Virtualization (Harvester) environment may\u00A0expose the OS default ssh login password\u00A0\u00A0if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. …","description":"Projects using the SUSE Virtualization (Harvester) environment may\u00A0expose the OS default ssh login password\u00A0\u00A0if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster.  The environment is not affected if the PXE boot mechanism is utilized along with the Harvester configuration\u00A0setup.","state":0,"publishedAt":"2026-01-08T13:15:41.923+00:00","modifiedAt":"2026-10-07T09:10:00.16+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · meissner@suse.de · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62877","https://github.com/harvester/harvester/security/advisories/GHSA-6g8q-hp2j-gvwv"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-62877","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-1188"],"productCriteria":[],"sourceDates":{"published":"2026-01-08T13:15:41.923","lastModified":"2026-10-07T09:10:00.160"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-62877","identifiers":["CVE-2025-62877"]},"retained":false,"historicalAffected":[]}],"coverage":[]}