NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow

NeuVector admin account has insecure default password

JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes

Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)

NeuVector telemetry sender is vulnerable to MITM and DoS

Potential information leakage from manager /network/graph API in NeuVector

Sensitive information is leaked into NeuVector’s manager container logs

NeuVector is shipping cryptographic material into its binary

JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

NeuVector process with sensitive arguments lead to leakage

NeuVector has an insecure password storage vulnerable to rainbow attack

Logout bypass via alternate JWT spelling