Armatura vulnerabilities
We track 3 vulnerabilities in Armatura products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2026.
Latest Armatura vulnerabilities
- 7.8 High severity
Armatura One: Insertion of Sensitive Information into Log File
Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials disclosed by this finding can be used to access the database when access to the serve
- 8.4 High severity
Armatura One: Use of Hard-coded Credentials
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and
- 8.4 High severity
Armatura One: Use of Hard-coded Cryptographic Key
Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and ar