6.2Mittel
CVE-2026-107437Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
Beschreibung
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
Schwachstellentyp (CWE):
CWE-798
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| GeoVision Inc. | GV-E-map Server | 18.2.0A, fixed 18.4 |
Referenzen und Patches
- https://www.geovision.com.tw/cyber_security.php vendor-advisory