6.2Orta
CVE-2026-107437Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
Açıklama
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
Zayıflık türü (CWE):
CWE-798
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| GeoVision Inc. | GV-E-map Server | 18.2.0A, fixed 18.4 |
Kaynaklar ve yamalar
- https://www.geovision.com.tw/cyber_security.php vendor-advisory