CVEvulnerability

CVE-2025-11602

6.3 MEDIUM Published 2025-10-31 Modified 2026-10-18 Official page ↗
Status
Deferred
Published
2025-10-31
Last modified
2026-10-18
Assigner
3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6
CVSS 4.0 (3b236295-4ccd-4a1f-a1c1-a72eecc8d7b6)
6.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:X/U:Clear
Weaknesses
CWE-226

Description

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses.

Related

Weakness · CWE (1)

  • CWE-226 Sensitive Information in Resource Not Removed Before Reuse weakness

References