CVE-2025-14758

Published: Dec 16, 2025Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: cve@gitlab.com (Secondary)

Description

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials

Related CWEs

CWE-1188

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (1)

https://gitlab.com/yaook/operator/-/issues/631

Source: cve@gitlab.com

Timeline

No history available yet.