CVE-2025-8415 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the…
Medium CVSS: 5.9

CVE-2025-8415

A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment.
Vendor
-
Product
-
CWE
CWE-289
Yayın Tarihi
2025-08-20 17:15:37
Güncelleme
2025-12-23 23:15:46
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-289 MEDIUM 2025

Referanslar

https://access.redhat.com/errata/RHSA-2025:14919 https://access.redhat.com/security/cve/CVE-2025-8415 https://bugzilla.redhat.com/show_bug.cgi?id=2385773 https://github.com/cryostatio/cryostat/pull/1001 https://github.com/cryostatio/cryostat/releases/tag/v4.0.2