| शीर्षक | sfturing hosp_order 627f426331da8086ce8fff2017d65b1ddef384f8 Hard-coded Credentials |
|---|
| विवरण | The affected configuration files `ssm_pro/src/main/resources/jdbc.properties` and `ssm_pro/src/main/resources/system_config.properties` contain committed database and SMTP authentication values. The database properties are loaded by `spring/spring-dao.xml` (lines 9 and 22-25), while `MailUtil.java` injects and uses the SMTP account and password at lines 20-27 and 39-45. Deployments that use these supplied configurations expose shared privileged database and mail credentials to anyone with repository access, enabling unauthorized access to backend data or use of the application's mail account.
|
|---|
| स्रोत | ⚠️ https://github.com/sfturing/hosp_order/issues/119 |
|---|
| उपयोगकर्ता | zbzz (UID 100167) |
|---|
| सबमिशन | 28/07/2026 06:22 PM (2 महीनों पहले) |
|---|
| संयम | 23/09/2026 02:48 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 408950 [sfturing hosp_order तक 627f426331da8086ce8fff2017d65b1ddef384f8 jdbc.properties कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|