← Back

CVE-2026-2103

nvd nist
Published: Feb 6, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.

Affected (1)

Products: Infor: Syteline Erp
Infor
1 product
Syteline Erp
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Syteline Erp
Version 10.0.8803.16889

Related CWEs

CWE-321
Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (1)

Source: cves@blacklanternsecurity.com
ExploitThird Party Advisory

Timeline

No history available yet.