Description
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can authenticate as the database superuser on a deployment where it has not been changed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Armatura | Armatura One | < 4.7.2 | 4.7.2 |
| Armatura | Armatura One (USA) | < 4.6.1 | 4.6.1 |
Advisories 1
- ICSA-26-274-01 Armatura LLC Armatura One CISA ICS & IT advisories · Oct 1, 2026