PT-2026-136045

CVE-2026-121021

·

Published

2026-11-03

·

Updated

2026-11-03

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service account via the main.conf configuration file.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-256: Plaintext Storage of a Password
Related identifiers
CVE-2026-121021
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com