CVE-2025-11602: Untargeted information leak in Bolt protocol handshake
Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11602?
CVE-2025-11602 has been classified as a low-severity vulnerability due to the limited information leak it causes.
How do I fix CVE-2025-11602?
To remediate CVE-2025-11602, upgrade to the latest version of Neo4j that addresses this vulnerability.
What types of software are affected by CVE-2025-11602?
CVE-2025-11602 affects both Neo4j Enterprise and Community editions.
What kind of information can be leaked through CVE-2025-11602?
CVE-2025-11602 allows attackers to potentially leak one byte of information from previous connections during the bolt protocol handshake.
Can attackers control the information leaked in CVE-2025-11602?
No, attackers do not have control over the specific information that is leaked through CVE-2025-11602.