W
eak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are recommended to upgrade to version 2.1.7, which fixes the issue.
References
| Link | Resource |
|---|---|
| https://lists.apache.org/thread/9rbvdvwg5fdhzjdgyrholgso53r26998 | Mailing List |
| http://www.openwall.com/lists/oss-security/2025/12/12/4 | Mailing List |
Configurations
History
15 Dec 2025, 17:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-12 15:15
Updated : 2025-12-15 17:19
NVD link : CVE-2025-54981
Mitre link : CVE-2025-54981
CVE.ORG link : CVE-2025-54981
JSON object : View
Products Affected
CWE
CWE-327
Use of a Broken or Risky Cryptographic Algorithm