PT-2025-30382

CVE-2025-7342

Published

2025-07-22

Updated

2025-08-22

Description by

CVSS 2.0

7.6

High

MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kubernetes Image Builder Nutanix (affected versions not specified) OVA providers (affected versions not specified)

Description VM images built with Kubernetes Image Builder Nutanix or OVA providers may use default credentials for Windows images if a user does not override them.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-798: Use of Hard-coded Credentials