{"id":"EUVD-2025-203112","enisaUuid":"efe46dde-6234-3870-b074-933c5e92627b","description":"NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server\u0027s authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.","datePublished":"Jan 8, 2026, 10:23:18 AM","dateUpdated":"Jan 8, 2026, 2:56:07 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-66001\nhttps://github.com/neuvector/neuvector/security/advisories/GHSA-4jj9-cgqc-x9h5\n","aliases":"CVE-2025-66001\nGHSA-4jj9-cgqc-x9h5\n","assigner":"suse","epss":0.36,"enisaIdProduct":[{"id":"58136ed9-0db4-314a-bab8-4b2fc6951a83","product":{"name":"neuvector","vendor":{"name":"SUSE"}},"product_version":"5.3.0 \u003c5.4.8"}],"enisaIdVendor":[{"id":"a239da3c-2883-362c-856a-dc4a06138fa5","vendor":{"name":"SUSE"}}],"enisaIdVulnerability":[{"id":"3e8f9448-28ad-31d9-a747-cb2a4857a365","vulnerability":{"id":"GHSA-4jj9-cgqc-x9h5","description":"NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)","datePublished":"Dec 12, 2025, 7:22:04 PM","dateUpdated":"Jan 8, 2026, 8:51:32 PM","baseScore":0.0,"references":"https://github.com/neuvector/neuvector/security/advisories/GHSA-4jj9-cgqc-x9h5\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-66001\nhttps://github.com/neuvector/neuvector/commit/955904b5762f296d209bf395a5fcc7a40a53c424\nhttps://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-66001\nhttps://github.com/neuvector/neuvector\n","enisa_id":"EUVD-2025-203112\n","aliases":"CVE-2025-66001\nGHSA-4jj9-cgqc-x9h5\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:52:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"55e9402e-3e41-38cd-b30d-a0ae63766f4e","vulnerability":{"id":"CVE-2025-66001","description":"NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server\u0027s authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.","datePublished":"Jan 8, 2026, 10:23:18 AM","dateUpdated":"Jan 8, 2026, 2:56:07 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://bugzilla.suse.com/show_bug.cgi?id\u003dCVE-2025-66001\nhttps://github.com/neuvector/neuvector/security/advisories/GHSA-4jj9-cgqc-x9h5\n","enisa_id":"EUVD-2025-203112\n","assigner":"suse","epss":0.36,"dataProcessed":"Oct 29, 2026, 7:20:27 AM","vulnerabilityProduct":[{"id":"085d3125-a616-35a8-9fd8-c75b69fac276","product":{"name":"neuvector","vendor":{"name":"SUSE"}},"product_version":"5.3.0 \u003c5.4.8"}],"vulnerabilityVendor":[{"id":"8fa0a746-303f-3b62-ad5e-4f968fba6fee","vendor":{"name":"SUSE"}}]}}],"enisaIdAdvisory":[]}