Use of Hard-coded Credentials
CVE-2025-37112
Summary
A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information.
- LOW
- LOCAL
- NONE
- CHANGED
- NONE
- HIGH
- HIGH
- NONE
CWE-798 - Use of Hard-coded Credentials
The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
References
Advisory Timeline
- Published
