Hard-Coded Database Credentials in Finka Programs Expose Sensitive Data

CVE-2025-13776

What is CVE-2025-13776?

Finka programs are susceptible to a credentials exposure vulnerability due to hard-coded Firebird database credentials shared across all instances. This flaw allows a malicious actor on the local network who is aware of these default credentials to manipulate or extract sensitive database content. This raises significant risks for organizations relying on these products, as unauthorized access can lead to data breaches and integrity issues.

References