CVE-2025-28381 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.
High CVSS: 7.5

CVE-2025-28381

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.
Vendor
Openc3
Product
Cosmos
CWE
CWE-526
Yayın Tarihi
2025-06-13 14:15:20
Güncelleme
2025-10-27 16:15:39
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-526 Cosmos HIGH Openc3 2025

Referanslar

https://github.com/OpenC3/cosmos/pull/1816 https://github.com/OpenC3/cosmos/pull/1816/commits/cce64c213fd2e6a70e2ccbf3622949fe8f9dcaef https://github.com/OpenC3/cosmos/releases/tag/v6.0.2 https://openc3.com/ https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/