Threats Tagged 'ghsa-rq48-r7v8-mfh6'

Armatura One contains a vulnerability where its database initialization routine uses a fixed, vendor-defined password for the database superuser account instead of generating a unique password per installation. This allows anyone with operating system access and knowledge of the fixed password to authenticate as the database superuser if the password has not been changed. The vulnerability affects versions prior to 4.6.1 and 4.7.2. It has a high severity with a CVSS score of 8.4.