Beveiligingsadvies

CVE-2025-54955

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-02 00:00:00

Laatst bijgewerkt 2025-08-04 15:20:53

Toegewezen door mitre

CVSS-score 8.1

Status PUBLISHED

Beschrijving

OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to full account takeover. By exploiting this, an unauthenticated attacker can obtain a valid JSON Web Token (JWT) belonging to a legitimate user without knowledge of their credentials.

← Alle CVE's bekijken Bekijk op cve.org ↗