Skip to content
OpenAdvisories

Product · shaiwz

data-platform-open

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords

    data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasour…