PT-2026-141786

CVE-2026-97867

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-522: Insufficiently Protected Credentials
Related identifiers
CVE-2026-97867
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com