Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-12969

Опубликовано: 01 дек. 2025
Источник: msrc
CVSS3: 6.5
EPSS Низкий

Описание

CVE-2025-12969

EPSS

Процентиль: 42%
0.00555
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
8 месяцев назад

Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs.

CVSS3: 6.5
github
8 месяцев назад

Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs.

CVSS3: 6.5
fstec
8 месяцев назад

Уязвимость плагина in_forward инструмента для сбора и обработки логов Fluent Bit, позволяющая нарушителю обойти существующие ограничения безопасности и получить доступ к системе

CVSS3: 6.5
redos
5 месяцев назад

Уязвимость fluent-bit

EPSS

Процентиль: 42%
0.00555
Низкий

6.5 Medium

CVSS3