一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月16日

CVE-2026-103509 – P4 Search (formerly Helix Search) returns stored credentials in cleartext through its conf

未分类
📑 文章目录

P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation.
This affects 2026.4.2 and earlier and is fixed in 2026.4.3.