EUVD-2022-4792

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

KIE server and Business Central before version 7.21.0.Final expose usernames and passwords as plaintext.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2016-7043	15 May 201920:33	–	circl
CVE	CVE-2016-7043	15 May 201915:46	–	cve
Cvelist	CVE-2016-7043	15 May 201915:46	–	cvelist
Github Security Blog	Password in config file in KIE server	24 May 202216:45	–	github
NVD	CVE-2016-7043	15 May 201916:29	–	nvd
OSV	CVE-2016-7043	15 May 201916:29	–	osv
OSV	GHSA-PJW3-C74J-M9FJ Password in config file in KIE server	24 May 202216:45	–	osv
Prion	Default credentials	15 May 201916:29	–	prion
Positive Technologies	PT-2019-7839 · Red Hat · Business Central +1	15 May 201900:00	–	ptsecurity
RedhatCVE	CVE-2016-7043	14 May 201921:21	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "7042b732-b532-35d5-9d2f-da227a5172c3",
        "vendor": {
          "name": "KIE"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "698a07c4-faea-3b4d-afd7-36a000840a91",
        "product": {
          "name": "kie-server"
        },
        "product_version": "affects < 7.21.0.Final"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-7043
github	www.github.com/kiegroup/droolsjbpm-integration/pull/1273
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

03 Oct 2025 20:07Current

7.8High risk

Vulners AI Score7.8

CVSS 35.9 - 9.8

CVSS 25

EPSS0.0023