CVE-2023-26462

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials usable for privilege escalation are stored in an insecure format. To read this stored data, the attacker needs access to the application server or its source code...

CVE-2023-26462

ThingsBoard 3.4.1 is affected by CVE-2023-26462 due to hard-coded service credentials stored in an insecure format. The root cause enables a remote attacker to escalate privileges, though exploitation requires access to the application server or its source code. Documents consistently describe el...