Infor SyteLine ERP Hard-Coded Cryptographic Keys Vulnerability Allowing Decryption of Stored Credentials

A vulnerability exists in Infor SyteLine ERP due to the use of hard-coded static cryptographic keys for encrypting stored credentials, such as user passwords, database connection strings, and API keys. These encryption keys are the same across all installations. An attacker with access to the application binary and database can decrypt the encrypted credentials.

Impact

Exploitation of this vulnerability allows for the decryption of all stored credentials, including user passwords, database connection strings, and API keys.