This vulnerability (CWE-532) involves the insertion of sensitive information into log files by the SUSE neuvector manager, affecting versions prior to 5.4.5. The issue exposes sensitive data within the manager container's logs, potentially allowing an attacker with low privileges and requiring user interaction to gain access to confidential information. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, and user interaction needed, with high confidentiality impact but no integrity or availability impact. No known exploits are reported in the wild, and no official fix or mitigation has been documented at this time.

Sensitive information exposure through log files could lead to confidentiality breaches if an attacker gains access to the logs. The vulnerability does not affect integrity or availability. The attack requires network access, low privileges, and user interaction, limiting the ease of exploitation but still posing a risk to confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the manager container logs to trusted users only and monitor for any unauthorized access attempts. Avoid exposing sensitive information in logs where possible through configuration adjustments if supported.