{"metadata": {"vulnerability": "CVE-2025-4166", "count": 38, "kinds": {"milestone": 9, "sighting": 4, "kev": 0, "other": 25}}, "data": [{"timestamp": "2025-04-30T21:43:10.413Z", "date_only": false, "value": "2025-04-30T21:43:10.413Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-4166", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-02T14:57:58.710Z", "date_only": false, "value": "2025-05-02T14:57:58.710Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4166", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-02T14:57:58.710Z", "date_only": false, "value": "2025-05-02T14:57:58.710Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / HashiCorp", "record": "CVE-2025-4166", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-02T15:15:50Z", "date_only": false, "value": "2025-05-02T15:15:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GCQF-F89C-68HV", "record": "GHSA-GCQF-F89C-68HV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-02T15:15:50.313Z", "date_only": false, "value": "2025-05-02T15:15:50.313", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4166", "record": "FKIE_CVE-2025-4166", "field": "published"}, {"timestamp": "2025-05-02T15:17:00Z", "date_only": false, "value": "2025-05-02T15:17:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14497", "record": "CVE-2025-4166", "field": "creation_timestamp", "uuid": "5a8a02b4-4677-4293-aa37-3926f882fd8f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4166\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.\n\ud83d\udccf Published: 2025-05-02T14:57:58.710Z\n\ud83d\udccf Modified: 2025-05-02T14:57:58.710Z\n\ud83d\udd17 References:\n1. https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin", "url": "https://t.me/DarkWebInformer_CVEAlerts/14497"}, {"timestamp": "2025-05-02T15:31:49Z", "date_only": false, "value": "2025-05-02T15:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GCQF-F89C-68HV", "record": "GHSA-GCQF-F89C-68HV", "field": "published"}, {"timestamp": "2025-05-02T15:39:46.954Z", "date_only": false, "value": "2025-05-02T15:39:46.954534Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4166", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-02T15:39:46.954Z", "date_only": false, "value": "2025-05-02T15:39:46.954534Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4166", "record": "FKIE_CVE-2025-4166", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-02T16:15:16.696Z", "date_only": false, "value": "2025-05-02T16:15:16.696629Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo77gzrlqga2", "record": "CVE-2025-4166", "field": "creation_timestamp", "uuid": "6ddab219-d5e5-47af-9b2e-26289e716ec1", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo77gzrlqga2"}, {"timestamp": "2025-05-02T18:01:03.862Z", "date_only": false, "value": "2025-05-02T18:01:03.862538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7frger7n2n", "record": "CVE-2025-4166", "field": "creation_timestamp", "uuid": "cc73069a-df52-4d5a-a9b9-958bde87a1d6", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7frger7n2n"}, {"timestamp": "2025-05-04T22:00:00Z", "date_only": false, "value": "2025-05-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0933", "record": "WID-SEC-W-2025-0933", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-04T22:00:00Z", "date_only": false, "value": "2025-05-04T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0933", "record": "WID-SEC-W-2025-0933", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-04T22:00:00Z", "date_only": false, "value": "2025-05-04T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0933", "record": "WID-SEC-W-2025-0933", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-05-04T22:00:00Z", "date_only": false, "value": "2025-05-04T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0933", "record": "WID-SEC-W-2025-0933", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-05T11:08:46.024Z", "date_only": false, "value": "2025-05-05T11:08:46.024+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0933", "record": "WID-SEC-W-2025-0933", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-06T19:11:09Z", "date_only": false, "value": "2025-05-06T19:11:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GCQF-F89C-68HV", "record": "GHSA-GCQF-F89C-68HV", "field": "modified"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15059-1", "record": "OPENSUSE-SU-2025:15059-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15059-1", "record": "OPENSUSE-SU-2025:15059-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15059-1", "record": "OPENSUSE-SU-2025:15059-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15059-1", "record": "OPENSUSE-SU-2025:15059-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-07T05:56:55.608Z", "date_only": false, "value": "2025-05-07T05:56:55.608Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-VAULT-2025-4166", "record": "BIT-VAULT-2025-4166", "field": "published"}, {"timestamp": "2025-05-08T13:01:48.440Z", "date_only": false, "value": "2025-05-08T13:01:48.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-4166", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-08T13:01:48.440Z", "date_only": false, "value": "2025-05-08T13:01:48.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4166", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15186-1", "record": "OPENSUSE-SU-2025:15186-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15186-1", "record": "OPENSUSE-SU-2025:15186-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15186-1", "record": "OPENSUSE-SU-2025:15186-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15186-1", "record": "OPENSUSE-SU-2025:15186-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-25T18:06:26Z", "date_only": false, "value": "2025-06-25T18:06:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19495", "record": "CVE-2025-4166", "field": "creation_timestamp", "uuid": "840ebfe3-34e6-43b1-81f5-d1cbae4c0790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52893\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. This issue has been fixed in OpenBao v2.3.0 and later. Like with HCSEC-2025-09, there is no known workaround except to ensure properly formatted requests from all clients.\n\ud83d\udccf Published: 2025-06-25T16:54:50.262Z\n\ud83d\udccf Modified: 2025-06-25T16:54:50.262Z\n\ud83d\udd17 References:\n1. https://github.com/openbao/openbao/security/advisories/GHSA-8f5r-8cmq-7fmq\n2. https://github.com/go-viper/mapstructure/pull/105\n3. https://github.com/go-viper/mapstructure/commit/ed3f92181528ff776a0324107b8b55026e93766a\n4. https://github.com/openbao/openbao/commit/cf5e920badbf96b41253534a3fd5ff5063bf4b30\n5. https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin/74717\n6. https://github.com/go-viper/mapstructure/releases/tag/v2.3.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/19495"}, {"timestamp": "2026-06-17T09:32:41.227Z", "date_only": false, "value": "2026-06-17T09:32:41.227", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4166", "record": "FKIE_CVE-2025-4166", "field": "lastModified"}, {"timestamp": "2026-07-27T05:48:46.909Z", "date_only": false, "value": "2026-07-27T05:48:46.909Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-OPENBAO-2025-4166", "record": "BIT-OPENBAO-2025-4166", "field": "published"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-OPENBAO-2025-4166", "record": "BIT-OPENBAO-2025-4166", "field": "modified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-VAULT-2025-4166", "record": "BIT-VAULT-2025-4166", "field": "modified"}, {"timestamp": "2026-09-20T21:32:18Z", "date_only": false, "value": "2026-09-20T21:32:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15059-1", "record": "OPENSUSE-SU-2025:15059-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:34:46Z", "date_only": false, "value": "2026-09-20T21:34:46Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15186-1", "record": "OPENSUSE-SU-2025:15186-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:34:46Z", "date_only": false, "value": "2026-09-20T21:34:46Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15186-1", "record": "OPENSUSE-SU-2025:15186-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-18T10:26:24Z", "date_only": false, "value": "2026-10-18T10:26:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15059-1", "record": "OPENSUSE-SU-2025:15059-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-18T10:26:24Z", "date_only": false, "value": "2026-10-18T10:26:24Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15059-1", "record": "OPENSUSE-SU-2025:15059-1", "field": "document.tracking.current_release_date"}]}