CVE-2026-101034:详情

CVE-2026-101034

2026-10-27
08h16 +00:00
A04-Insecure Design
2026-11-04
15h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

参考资料