CVE-2025-9239: elunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption
A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java of the component DES Key Handler. The manipulation of the argument STRPARAM with the input Passw0rd leads to inadequate encryption strength. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9239?
CVE-2025-9239 has been classified as a critical vulnerability due to its potential impact on sensitive data.
How do I fix CVE-2025-9239?
To fix CVE-2025-9239, you should update elunez eladmin to version 2.8 or later.
What components are affected by CVE-2025-9239?
CVE-2025-9239 affects the DES Key Handler utilized in the EncryptUtils function of elunez eladmin up to version 2.7.
What could happen if CVE-2025-9239 is exploited?
Exploitation of CVE-2025-9239 could lead to unauthorized access to sensitive data due to improper encryption handling.
Who is the vendor for CVE-2025-9239?
The vendor for CVE-2025-9239 is elunez, responsible for the eladmin software affected by this vulnerability.