CVE-2026-50641: CVE-2026-50641: güvenlik açığı

Açıklama (NVD)

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.

Özet bilgiler

CVSS v4.0

7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,24 (yüzdelik 15)

CWE

CWE-256

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• cert.pl
• www.streamsoft.pl
• CWE-256