Description
Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Armatura | Armatura One | < 4.7.2 | 4.7.2 |
| Armatura | Armatura One (USA) | < 4.6.1 | 4.6.1 |
Advisories 1
- ICSA-26-274-01 Armatura LLC Armatura One CISA ICS & IT advisories · Oct 1, 2026