{"id":"EUVD-2025-203112","revision":"35402768c84a407e8ff03a60a83d5e2f","records":[{"revision":"35402768c84a407e8ff03a60a83d5e2f","observedAt":"2026-11-11T04:33:10.569+00:00","statement":{"source":"euvd","id":"EUVD-2025-203112","aliases":["CVE-2025-66001","GHSA-4jj9-cgqc-x9h5"],"title":"NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the sys…","description":"NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":8.8,"severity":null}],"references":["https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-66001","https://github.com/neuvector/neuvector/security/advisories/GHSA-4jj9-cgqc-x9h5"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-203112","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jan 8, 2026, 10:23:18 AM","dateUpdated":"Jan 8, 2026, 2:56:07 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-203112","identifiers":["EUVD-2025-203112","CVE-2025-66001","GHSA-4jj9-cgqc-x9h5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}