CVE-2026-112168:詳細資料

CVE-2026-112168

2026-11-09
13h17 +00:00
A02-Cryptographic FailuresA04-Insecure DesignA07-Identif. and Authent. Fail
2026-11-09
13h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-261 Weak Encoding for Password
The product uses a weak or trivial encoding for a password.
CWE-312 Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

參考資料