Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-65309

Storage of passwords in a reversible format

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CyberDanube

Description

ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ANDRITZ HIPASE-250

Default version status: affected

  • 0 to ≤ 7.20affected
  • 7.50unaffected

ANDRITZ 250 SCALA

Default version status: affected

  • 0 to ≤ 7.20affected
  • 7.50unaffected

References