Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-94593

Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the server operating system is available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Armatura LLC Armatura One

Default version status: unaffected

  • 0 to < 4.7.2affected
  • 4.7.2unaffected

Armatura LLC Armatura One (USA)

Default version status: unaffected

  • 0 to < 4.6.1affected
  • 4.6.1_USAunaffected

References