Skip to content
OpenAdvisories

Vendor

Armatura

4 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.4

    Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

    Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and a…

  • High 8.4

    Armatura LLC Armatura One Use of Hard-coded Credentials

    Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and…

  • High 7.8

    Armatura LLC Armatura One Insertion of Sensitive Information into Log File

    Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the serv…