{"id":"CVE-2026-97867","kind":"vulnerability","aliases":["CVE-2026-97867"],"related":[],"title":"EJBd: remote clients can read database credentials from datasource lookups","description":"The EJBd remote protocol returns datasource connection details, including database credentials, to remote clients that look up a datasource. A remote client able to reach the EJBd endpoint can obtain the database credentials and connect to the database directly. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.","summary":"The EJBd remote protocol returns datasource connection details, including database credentials, to any remote client that looks up a datasource. An attacker who can reach the EJBd endpoint can take those credentials and connect to the database directly.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"EJBd","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["databases","ejbd","java","other"],"not_affected_if":["ejbd-not-deployed","endpoint-not-reachable"],"how_to_check":"- Confirm whether EJBd is deployed and its endpoint is reachable from the network, using the product's own configuration (unknown: the sources do not name the product's version command or config file)\n- Check the installed EJBd version against the fixed versions below","fix":"- Upgrade to `10.3.0` or `11.0.0-M2`, which the sources state fix the issue","status":"open","published_at":"2026-11-10T16:17:25+00:00","first_seen_at":"2026-11-10T16:22:35+00:00","triaged_at":"2026-11-10T16:23:56+00:00","updated_at":"2026-11-10T16:23:56+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-10T16:23:56Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade to `10.3.0` or `11.0.0-M2`, which the sources state fix the issue","reach":"network","title":"EJBd: remote clients can read database credentials from datasource lookups","impact":"high","summary":"The EJBd remote protocol returns datasource connection details, including database credentials, to any remote client that looks up a datasource. An attacker who can reach the EJBd endpoint can take those credentials and connect to the database directly.","audience":"businesses","category":"other","nicknames":[],"who_cares":["ejbd","java","databases"],"confidence":0.5,"fix_status":"available","needs_auth":"no","worst_case":"Remote clients obtain database credentials and connect to the database directly.","analyst_note":"Find the vendor and affected version ranges for EJBd from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-97867) and confirm the fixed versions and the check command.","how_to_check":"- Confirm whether EJBd is deployed and its endpoint is reachable from the network, using the product's own configuration (unknown: the sources do not name the product's version command or config file)\n- Check the installed EJBd version against the fixed versions below","plain_action":"","product_name":"EJBd","needs_analyst":true,"not_affected_if":["ejbd-not-deployed","endpoint-not-reachable"],"who_is_affected":"Systems that run the EJBd remote protocol and expose its endpoint to clients that can reach it. The sources do not name the product or list affected version ranges, so exact exposure is unknown; a team that does not run EJBd can skip it.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000758,"input_tokens":4550,"output_tokens":606,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-97867':13A,16A '10.3.0':105C '11.0.0':107C 'abl':81C 'attack':42B 'client':3A,35B,72C,80C 'connect':27B,54B,65C,93C 'credenti':7A,31B,52B,69C,91C 'cve':11A,14A 'databas':6A,18B,30B,57B,68C,90C,96C 'datasourc':9A,26B,40B,64C,77C 'detail':28B,66C 'direct':58B,97C 'ejbd':1A,17A,19B,22B,47B,60C,85C 'endpoint':48B,86C 'fix':110C 'includ':29B,67C 'issu':112C 'java':20B 'look':37B,74C 'lookup':10A 'm2':108C 'obtain':88C 'protocol':24B,62C 'reach':45B,83C 'read':5A 'recommend':100C 'remot':2A,23B,34B,61C,71C,79C 'return':25B,63C 'take':50B 'upgrad':102C 'user':98C 'version':104C","nicknames":[],"mitigations":[],"who_affected":"Systems that run the EJBd remote protocol and expose its endpoint to clients that can reach it. The sources do not name the product or list affected version ranges, so exact exposure is unknown; a team that does not run EJBd can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["ejbd"],"ptokens":["ejbd"],"labels":["databases","ejbd","java","other","unknown","vendor"],"campaign_type":null,"search_a":"'-2026':12A,15A '-97867':13A,16A 'client':3A 'credenti':7A 'cve':11A,14A 'databas':6A 'datasourc':9A 'ejbd':1A,17A 'lookup':10A 'read':5A 'remot':2A","search_b":"'attack':42B 'client':35B 'connect':27B,54B 'credenti':31B,52B 'databas':18B,30B,57B 'datasourc':26B,40B 'detail':28B 'direct':58B 'ejbd':19B,22B,47B 'endpoint':48B 'includ':29B 'java':20B 'look':37B 'protocol':24B 'reach':45B 'remot':23B,34B 'return':25B 'take':50B","search_c":"'10.3.0':105C '11.0.0':107C 'abl':81C 'client':72C,80C 'connect':65C,93C 'credenti':69C,91C 'databas':68C,90C,96C 'datasourc':64C,77C 'detail':66C 'direct':97C 'ejbd':60C,85C 'endpoint':86C 'fix':110C 'includ':67C 'issu':112C 'look':74C 'm2':108C 'obtain':88C 'protocol':62C 'reach':83C 'recommend':100C 'remot':61C,71C,79C 'return':63C 'upgrad':102C 'user':98C 'version':104C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T16:17:25+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-97867","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97867","severity":null,"published_at":"2026-11-10T16:17:25+00:00","modified_at":"2026-11-10T16:17:25+00:00","first_seen_at":"2026-11-10T16:22:35+00:00","fetched_at":"2026-11-10T16:22:35+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}