SUSE CVE-2025-6010

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-6010

CVE-2025-6010 is connected to OpenBao’s timing side-channel in the userpass authentication method. The OpenBao advisory notes that user enumeration is possible due to timing differences between non-existent users and users with stored credentials, independent of credential validity. The issue is ...