7.1Hoch
CVE-2026-50641Plaintext password storage in Streamsoft Business Intelligence
Beschreibung
Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.
Schwachstellentyp (CWE):
CWE-256
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Streamsoft | Business Intelligence | < 6.8.0.0 |
Referenzen und Patches
- https://cert.pl/posts/2026/07/CVE-2026-50641 third-party-advisory
- https://www.streamsoft.pl/business-intelligence/ product