CVE-2026-97867
2026-11-10
16h17 +00:00
16h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Insufficiently Protected Credentials The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. |
