7.8
CVE-2026-2103
- EPSS 0.1%
- Veröffentlicht 06.02.2026 16:22:28
- Zuletzt bearbeitet 17.02.2026 15:46:31
- Quelle cves@blacklanternsecurity.com
- CVE-Watchlists
- Unerledigt
LoginUse of Hard-Coded Cryptographic Key for Password Storage
Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Infor ≫ Syteline Erp Version10.0.8803.16889
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.009 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| cves@blacklanternsecurity.com | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
|
CWE-321 Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp