7.1Yüksek
CVE-2026-50641Plaintext password storage in Streamsoft Business Intelligence
Açıklama
Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.
Zayıflık türü (CWE):
CWE-256
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Streamsoft | Business Intelligence | < 6.8.0.0 |
Kaynaklar ve yamalar
- https://cert.pl/posts/2026/07/CVE-2026-50641 third-party-advisory
- https://www.streamsoft.pl/business-intelligence/ product