Lucene search
+L

782 matches found

Cvelist
Cvelist
•added 2026/10/16 5:39 p.m.•6 views

CVE-2026-111696 data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords

data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasource detail API, for example via...

7.1CVSS
SaveExploits0References4
Rows per page
Query Builder