A vulnerability was found in the Cryostat HTTP API. Cryostat’s HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled. This situation enables an unauthenticated, malicious attacker to jeopardize the environment.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.9 | CVE-2025-8415 |
Exploitation
To exploit this vulnerability, an attacker would need to access the Cryostat HTTP API over the network. If Network Policies are disabled, the attacker can connect to the API port without authentication, potentially leading to unauthorized access and manipulation of the environment.
Affected Products
- Cryostat: A monitoring and management tool for Java applications that may expose sensitive data if the HTTP API is not properly secured.
Mitigation
To mitigate this vulnerability, it is recommended to implement strict Network Policies to restrict access to the Cryostat HTTP API. Additionally, ensure that the API is only accessible through trusted networks and consider applying authentication mechanisms to prevent unauthorized access.