CVE-2025-8530 - elunez eladmin Druid application-prod.yml default credentials

Back Back to CVE browser

MEDIUM

elunez eladmin Druid application-prod.yml default credentials

Published Aug 4, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.49%

Description

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-system\src\main\resources\config\application-prod.yml of the component Druid. The manipulation of the argument login-username/login-password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Elunez Product Eladmin Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -
- Version
  2.1
  Status
  affected
  Constraints
  -
- Version
  2.2
  Status
  affected
  Constraints
  -
- Version
  2.3
  Status
  affected
  Constraints
  -
- Version
  2.4
  Status
  affected
  Constraints
  -
- Version
  2.5
  Status
  affected
  Constraints
  -
- Version
  2.6
  Status
  affected
  Constraints
  -
- Version
  2.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Elunez

Eladmin

n/a

Version	Status	Constraints
2.0	affected	-
2.1	affected	-
2.2	affected	-
2.3	affected	-
2.4	affected	-
2.5	affected	-
2.6	affected	-
2.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-1392

CWE-798

Hard-coded Credentials

References (5)

https://github.com/elunez/eladmin/issues/883
exploitissue-trackingIssue Tracking
https://github.com/elunez/eladmin/issues/883#issue-3252078139
exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.318656
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.318656
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.622177
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://github.com/elunez/eladmin/issues/883		exploitissue-trackingIssue Tracking
https://github.com/elunez/eladmin/issues/883#issue-3252078139		exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.318656		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.318656		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.622177		third-party-advisoryThird Party AdvisoryVDB Entry