Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-14758 EUVD-2025-203480GHSA-r9rc-4fcg-85c7

Initialization of a Resource with an Insecure Default in YAOOK

Published Dec 16, 2025 · Updated Dec 16, 2025 · Assigned by GitLab

Description

Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially including credentials

Affected products

VendorProductAffectedFixed
ALASCA YAOOK 0.20240809.0 – < 0.20251211.0 0.20251211.0

References