Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-12969

Опубликовано: 01 дек. 2025
Источник: msrc
CVSS3: 6.5
EPSS Низкий

Описание

CVE-2025-12969

EPSS

Процентиль: 24%
0.00082
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
3 месяца назад

Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs.

CVSS3: 6.5
github
3 месяца назад

Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs.

CVSS3: 6.5
fstec
3 месяца назад

Уязвимость плагина in_forward инструмента для сбора и обработки логов Fluent Bit, позволяющая нарушителю обойти существующие ограничения безопасности и получить доступ к системе

EPSS

Процентиль: 24%
0.00082
Низкий

6.5 Medium

CVSS3