Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-2103

Use of Hard-Coded Cryptographic Key for Password Storage

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
BLSOPS

Description

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Infor SyteLine ERP

Default version status: unaffected

  • 10.0.8803.16889affected

References