VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 26, 2024· Updated Jun 17, 2026

CVE-2023-50894

CVE-2023-50894

Description

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Janitza/GridVisllm-fuzzy2 versions
    <=9.0.66+ 1 more
    • (no CPE)range: <=9.0.66
    • cpe:2.3:a:janitza:gridvis:*:*:*:*:*:*:*:*range: <9.0.67
  • Janitza/GridVisdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.