Search

Find a vulnerability

Search criteria

    3 vulnerabilities by Zakład Ubezpieczeń Społecznych

    CVE-2026-110972 (GCVE-0-2026-110972)

    Vulnerability from cvelistv5 – Published: 2026-10-30 11:56 – Updated: 2026-11-03 09:13
    VLAI
    Title
    Use of Client-Side Authentication in Płatnik
    Summary
    Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 334 in version 10.02.002.
    Severity
    8.6 (High)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-30 15:26 UTC
    CWE
    • CWE-603 - Use of Client-Side authentication
    Assigner
    CERT-PL CNA
    References
    Impacted products
    Vendor Product Version
    Zakład Ubezpieczeń Społecznych Płatnik Affected: 0 , ≤ 10.02.002 (custom)
        cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-30 00:00
    Credits
    Wojciech Giełda
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-110972",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-30T15:26:06.783259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-30T15:26:20.225Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "P\u0142atnik",
          "vendor": "Zak\u0142ad Ubezpiecze\u0144 Spo\u0142ecznych",
          "versions": [
            {
              "changes": [
                {
                  "at": "metric 334",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "10.02.002",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "10.02.002",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Wojciech Gie\u0142da"
        }
      ],
      "datePublic": "2026-10-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.\u003cbr\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eThis issue was fixed\u003cspan\u003e\u0026nbsp;\u003c/span\u003e\u003cspan\u003ein metric\u0026nbsp;\u003c/span\u003e334\u003cspan\u003e\u0026nbsp;in version 10.02.002.\u003c/span\u003e\u003c/div\u003e"
            }
          ],
          "value": "P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.\n\n\n\nThis issue was fixed\u00a0in metric\u00a0334\u00a0in version 10.02.002."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-603",
              "description": "CWE-603 Use of Client-Side authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T09:13:32.724Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/posts/2026/10/CVE-2026-110970"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.zus.pl/firmy/program-platnik/o-programie-platnik"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Use of Client-Side Authentication in P\u0142atnik",
      "x_generator": {
        "engine": "Vulnogram 1.0.3"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-110972",
    "datePublished": "2026-10-30T11:56:49.582Z",
    "dateReserved": "2026-10-15T10:24:54.756Z",
    "dateUpdated": "2026-11-03T09:13:32.724Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-110971 (GCVE-0-2026-110971)

    Vulnerability from cvelistv5 – Published: 2026-10-30 11:56 – Updated: 2026-11-03 09:13
    VLAI
    Title
    Weak password encoding in Płatnik
    Summary
    Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.  This issue was fixed in metric 334 in version 10.02.002.
    Severity
    7.7 (High)
    CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-30 15:30 UTC
    CWE
    • CWE-261 - Weak encoding for password
    Assigner
    CERT-PL CNA
    References
    Impacted products
    Vendor Product Version
    Zakład Ubezpieczeń Społecznych Płatnik Affected: 0 , ≤ 10.02.002 (custom)
        cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-30 00:00
    Credits
    Wojciech Giełda
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-110971",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-30T15:30:23.448311Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-30T15:30:47.680Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "P\u0142atnik",
          "vendor": "Zak\u0142ad Ubezpiecze\u0144 Spo\u0142ecznych",
          "versions": [
            {
              "changes": [
                {
                  "at": "metric 334",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "10.02.002",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "10.02.002",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Wojciech Gie\u0142da"
        }
      ],
      "datePublic": "2026-10-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Use of a weak password encoding algorithm in P\u0142atnik software allows a user who obtains\u0026nbsp;encoded password to easily decode it.\u0026nbsp;\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eThis issue was fixed in metric 334\u0026nbsp;in version 10.02.002.\u003c/div\u003e"
            }
          ],
          "value": "Use of a weak password encoding algorithm in P\u0142atnik software allows a user who obtains\u00a0encoded password to easily decode it.\u00a0\n\n\nThis issue was fixed in metric 334\u00a0in version 10.02.002."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-261",
              "description": "CWE-261 Weak encoding for password",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T09:13:15.367Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/posts/2026/10/CVE-2026-110970"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.zus.pl/firmy/program-platnik/o-programie-platnik"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Weak password encoding in P\u0142atnik",
      "x_generator": {
        "engine": "Vulnogram 1.0.3"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-110971",
    "datePublished": "2026-10-30T11:56:44.797Z",
    "dateReserved": "2026-10-15T10:24:54.756Z",
    "dateUpdated": "2026-11-03T09:13:15.367Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-110970 (GCVE-0-2026-110970)

    Vulnerability from cvelistv5 – Published: 2026-10-30 11:56 – Updated: 2026-11-03 09:13
    VLAI
    Title
    Lack of traffic encryption in Płatnik
    Summary
    Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own. This issue was fixed in metric 334 in version 10.02.002.
    Severity
    2.3 (Low)
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-30 15:29 UTC
    CWE
    • CWE-1428 - Reliance on HTTP instead of HTTPS
    Assigner
    CERT-PL CNA
    References
    Impacted products
    Vendor Product Version
    Zakład Ubezpieczeń Społecznych Płatnik Affected: 0 , ≤ 10.02.002 (custom)
        cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-10-30 00:00
    Credits
    Grzegorz Sawicki
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-110970",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-30T15:29:49.098740Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-30T15:30:01.665Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "P\u0142atnik",
          "vendor": "Zak\u0142ad Ubezpiecze\u0144 Spo\u0142ecznych",
          "versions": [
            {
              "changes": [
                {
                  "at": "metric 334",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "10.02.002",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:zak_ad_ubezpiecze_spo_ecznych:p_atnik:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "10.02.002",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Grzegorz Sawicki"
        }
      ],
      "datePublic": "2026-10-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eP\u0142atnik\u0026nbsp;\u003cspan\u003euses HTTP protocol to download\u0026nbsp;\u003c/span\u003eupdates, libraries and support files\u003cspan\u003e. It allows an attacker to\u0026nbsp;\u003c/span\u003e\u003cspan\u003econduct a Man-In-The-Middle attack, obtain transmitted data and\u003c/span\u003e\u003cspan\u003e\u0026nbsp;\u003c/span\u003e\u003cspan\u003ereplace the original files with their own.\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eThis issue was fixed\u003cspan\u003e\u0026nbsp;\u003c/span\u003e\u003cspan\u003ein metric\u0026nbsp;\u003c/span\u003e334\u003cspan\u003e\u0026nbsp;in version 10.02.002.\u003c/span\u003e\u003c/div\u003e"
            }
          ],
          "value": "P\u0142atnik\u00a0uses HTTP protocol to download\u00a0updates, libraries and support files. It allows an attacker to\u00a0conduct a Man-In-The-Middle attack, obtain transmitted data and\u00a0replace the original files with their own.\n\n\n\n\nThis issue was fixed\u00a0in metric\u00a0334\u00a0in version 10.02.002."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 2.3,
            "baseSeverity": "LOW",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1428",
              "description": "CWE-1428 Reliance on HTTP instead of HTTPS",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T09:13:02.717Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/posts/2026/10/CVE-2026-110970"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.zus.pl/firmy/program-platnik/o-programie-platnik"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Lack of traffic encryption in P\u0142atnik",
      "x_generator": {
        "engine": "Vulnogram 1.0.3"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-110970",
    "datePublished": "2026-10-30T11:56:39.165Z",
    "dateReserved": "2026-10-15T10:24:54.756Z",
    "dateUpdated": "2026-11-03T09:13:02.717Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}