Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-54981

Apache StreamPark: Weak Encryption Algorithm in StreamPark

Description

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are recommended to upgrade to version 2.1.7, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache StreamPark

Default version status: unaffected

  • 2.0.0 to < 2.1.7affected

References