782 matches found
CVE-2026-111696 data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords
data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasource detail API, for example via...
7.1CVSS
SaveExploits0References4
20