CVE 7 HIGH

CVE-2025-8863_CVE-2025-8863

7 / 10
HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:L

Description

YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission

AI Analysis

YugabyteDB transmitted diagnostic information over an insecure HTTP connection, potentially exposing sensitive data during transmission.

Basic Information

ID CVE-2025-8863
Source Yugabyte
Published Aug 11, 2025 at 13:03

Affected Product

Vendor YugabyteDB Inc
Product YugabyteDB
Version 2024.1.0
Affected Versions YugabyteDB Inc YugabyteDB 2024.1.0
YugabyteDB Inc YugabyteDB 2.20.0.0
YugabyteDB Inc YugabyteDB 2.23.0.0

CWE Classification

AI Assessment

AI Severity High
Vendor YugabyteDB Inc
Product YugabyteDB
Version 2024.1.0, 2.20.0.0, 2.23.0.0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.