CVE-2025-62877 Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer

Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...

CVE-2025-62877: Initialization of a Resource with an Insecure Default

Projects using the SUSE Virtualization Harvester environment may expose the OS default ssh login password if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is...

SUSE Virtualization Harvester 安全漏洞

SUSE Virtualization Harvester is a virtual machine management platform from SUSE Germany. A security vulnerability exists in SUSE Virtualization Harvester versions 1.5.x and 1.6.x, which stems from the exposure of the default SSH login password and could lead to an unauthorized access attack...