What is the official website of Ravago Building Solutions Turkiye ?

The official website of Ravago Building Solutions Turkiye is https://www.ravagobuildingsolutions.com.

What is Ravago Building Solutions Turkiye's cybersecurity risk score?

Ravago Building Solutions Turkiye has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Ravago Building Solutions Turkiye experienced?

According to Rankiteo, Ravago Building Solutions Turkiye currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ravago Building Solutions Turkiye been affected by any supply chain cyber incidents ?

According to Rankiteo, Ravago Building Solutions Turkiye has been affected by a supply chain cyber incident involving Defused, with the incident ID ERIDEFJOHROLVID1772180734.

Does Ravago Building Solutions Turkiye have SOC 2 Type 1 certification ?

According to Rankiteo, Ravago Building Solutions Turkiye is not certified under SOC 2 Type 1.

Does Ravago Building Solutions Turkiye have SOC 2 Type 2 certification ?

According to Rankiteo, Ravago Building Solutions Turkiye does not hold a SOC 2 Type 2 certification.

Does Ravago Building Solutions Turkiye comply with GDPR ?

According to Rankiteo, Ravago Building Solutions Turkiye is not listed as GDPR compliant.

Does Ravago Building Solutions Turkiye have PCI DSS certification ?

According to Rankiteo, Ravago Building Solutions Turkiye does not currently maintain PCI DSS compliance.

Does Ravago Building Solutions Turkiye comply with HIPAA ?

According to Rankiteo, Ravago Building Solutions Turkiye is not compliant with HIPAA regulations.

Does Ravago Building Solutions Turkiye have ISO 27001 certification ?

According to Rankiteo,Ravago Building Solutions Turkiye is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ravago Building Solutions Turkiye operate in ?

Ravago Building Solutions Turkiye operates primarily in the Construction industry.

How many employees does Ravago Building Solutions Turkiye have ?

Ravago Building Solutions Turkiye employs approximately 88 people worldwide.

Does Ravago Building Solutions Turkiye own any subsidiaries ?

Ravago Building Solutions Turkiye presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ravago Building Solutions Turkiye have ?

Ravago Building Solutions Turkiye's official LinkedIn profile has approximately 4,121 followers.

What is the NAICS classification code for Ravago Building Solutions Turkiye ?

Ravago Building Solutions Turkiye is classified under the NAICS code 23, which corresponds to Construction.

Does Ravago Building Solutions Turkiye have a Crunchbase profile ?

No, Ravago Building Solutions Turkiye does not have a profile on Crunchbase.

Does Ravago Building Solutions Turkiye have a LinkedIn profile ?

Yes, Ravago Building Solutions Turkiye maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ravagobuildingsolutionsturkey.

How many cybersecurity incidents has Ravago Building Solutions Turkiye experienced ?

As of August 29, 2026, Rankiteo reports that Ravago Building Solutions Turkiye has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Ravago Building Solutions Turkiye have ?

Ravago Building Solutions Turkiye has an estimated 39,908 peer or competitor companies worldwide.

What types of cybersecurity incidents has Ravago Building Solutions Turkiye faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

RBST

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Ravago Building Solutions Turkiye Vendor Cyber Rating & Cyber Score

ravagobuildingsolutions.com

Add Your Compliance Badge

Ravago A.Ş. 1961 yılında Belçika merkezli olarak kurulan, yaklaşık 40 ülkede 350’nin üzerinde faaliyet gösteren, dünyada plastik ve yapı ürünleri, üretim-satış-pazarlama faaliyetlerinde bulunan bir gruptur. Ravago grubunun inşaat ve yalıtım sektörüne, ürün ve sistem çözümleri sunan iş kolu olan Ravago Bina Çözümleri adı altında hizmet vermektedir. Ravago Bina Çözümleri, inşaat sektörüne sunduğu üstün nitelikli ürün ve çözümler ile müşteri memnuniyeti sağlamayı ilke edinmiştir. · Isı Yalıtımı · Yalıtımlı Cephe Çözümleri · Çatı ve Su Yalıtımı · Dizayn ve Dekorasyon · Giydirme Cepheler · Mekanik ve Tesisat Yalıtımı Türkiye’de 8 bölge müdürlüğü ve 300’e yakın güçlü bayi ağı ile sektöre hızlı, verimli ve güvenli hizmet sunmaktadır. Ravago

RBST A.I CyberSecurity Scoring

Scoring History

RBST

Ravago Building Solutions Turkiye CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

VIDARA Turkey Kimya...

Cyber Attack

2/2026

Defused

ERIDEFJOHROLVID...

Loading…

A.I.

RBST Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for RBST

Incidents vs Construction Industry Avg (This Year)

No incidents recorded for Ravago Building Solutions Turkiye in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ravago Building Solutions Turkiye in 2026.

Incident Types RBST vs Construction Industry Avg (This Year)

No incidents recorded for Ravago Building Solutions Turkiye in 2026.

Incident History - RBST (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ravago Building Solutions Turkiye Subsidiaries

RBST

Construction

Website: https://www.ravagobuildingsolutions.com

Company Size: 88

RavagoPlastics Manufacturing

Ravago TürkiyeChemical Manufacturing

M. Holland CompanyPlastics Manufacturing

VIDARAChemical Manufacturing

VIDARA UKChemical Manufacturing

Ravago Chemicals - Legacy TMC MaterialsChemical Manufacturing

VIDARA IBERIAChemical Raw Materials Manufacturing

Vidara do BrasilChemical Manufacturing

Vidara Flavors & FragrancesChemical Manufacturing

Diffusions Aromatiques SasChemical Manufacturing

Hexus VidaraFood and Beverage Services

Vidara Human NutritionFood and Beverage Services

Promic GroupEnvironmental Services

RESINEXPlastics Manufacturing

TosafPlastics Manufacturing

Entec PolymersPlastics Manufacturing

Bamberger Amco PolymersPlastics Manufacturing

Bamberger Amco Polymers MéxicoPlastics Manufacturing

VIDARA Turkey Kimya Tic. A.Ş.Chemical Manufacturing

Bamberger PolymersPlastics Manufacturing

Ravago Greece GroupPlastics Manufacturing

Entec Resins MéxicoPlastics Manufacturing

Ultrapolymers GroupPlastics Manufacturing

Ultrapolymers LimitedPlastics Manufacturing

ULTRAPOLYMERS NORDIC ABPlastics Manufacturing

Ultrapolymers ItaliaPlastics Manufacturing

Ultrapolymers PortugalPlastics Manufacturing

Ultrapolymers SpainPlastics Manufacturing

Ultrapolymers FrancePlastics Manufacturing

Ultrapolymers HungaryPlastics Manufacturing

Ultrapolymers AustraliaPlastics Manufacturing

Ravago AmericasPlastics Manufacturing

Channel Prime AlliancePlastics Manufacturing

MuehlsteinPlastics Manufacturing

Ravago IndiaPlastics Manufacturing

Ravago Manufacturing IndiaPlastics Manufacturing

Ravago Shah PolymersPlastics Manufacturing

Ravago Manufacturing AmericasPlastics Manufacturing

Ravago Chemicals North America (RCNA)Chemical Manufacturing

Blue PolymersPlastics Manufacturing

Ravago Building Solutions UKWholesale Building Materials

Entec Polímeros BrasilPlastics Manufacturing

Ravago Thermoplastic ElastomersPlastics Manufacturing

Apex Techno Polymer Pvt. Ltd.Plastics Manufacturing

TCL HofmannWholesale Import and Export

Ravago Group ItalyPlastics Manufacturing

Genesis PolymersPlastics Manufacturing

Channel Prime Alliance InternationalPlastics Manufacturing

Ravago Building Solutions NetherlandsWholesale Building Materials

Ravago Building Solutions HungaryBuilding Materials

Ravago Building Solutions FranceWholesale Building Materials

Ravago Building Solutions CroatiaWholesale Building Materials

INAQUA Vertriebsgesellschaft mbHWholesale Chemical and Allied Products

Ravago Building Solutions Germany GmbHConstruction

RP Compounds GmbHPlastics Manufacturing

Ravago Building Solutions ItaliaConstruction

Entec Polymers ArgentinaPlastics Manufacturing

Ravago Building Solutions BelgiqueWholesale Building Materials

Ravago Building Solutions PolandBuilding Materials

TCL HuntInternational Trade and Development

DriSpaceWholesale Building Materials

Space Industries Ltd (New Zealand)Chemical Manufacturing

Ravago Logistic Terneuzen B.V.Truck Transportation

RAVAGO CHINAChemical Manufacturing

Ravago Building Solutions BelgiëWholesale Building Materials

Loading…

Ravago Building Solutions Turkiye Similar Companies

Andrade Gutierrez S.A.

andradegutierrez.com.br

Fundada em Belo Horizonte, Minas Gerais, a Andrade Gutierrez tem reconhecida expertise no segmento de construção pesada. Na década de 1990 iniciou a diversificação dos negócios com investimentos nas áreas de Concessões e Telecomunicações. Hoje o Grupo Andrade Gutierrez é um dos maiores conglomerados de infraestrutura na América Latina e acumula projetos realizados em mais de 40 países. Participa como investidora em empresas como Oi e Contax (AG Telecom), CCR, Sanepar, e Cemig (AG Investimentos). AG Jovem: www.agjovem.com.br Facebook: https://www.facebook.com/AndradeGutierrezSA Twitter: https://twitter.com/Grupo_AG Youtube: http://www.youtube.com/user/AndradeGutierrez

Bouygues Construction

bouygues-construction.com

Bouygues Construction employs 35,600 people around the world, all driven by the greatest and most exciting responsibility of all – building for life. For our customers in more than 50 countries, we deliver much more than projects. We build to create spaces, connections and opportunities. We improve daily life for millions of people by creating structures and buildings that welcome life in all its diversity, serving all our needs: housing, healthcare, education, work, tourism, leisure activities, public services, etc. We are aware that everything we build is here to stay, and our legacy as builders will be with us for generations to come. This is why every day, we look for new solutions in order to design, renovate, and build differently. Our aim is to address the critical imperatives of the environmental transition: we are committed to making construction sustainable and less resource-intensive. We support the development of low-carbon energy production and public transport infrastructures, and we construct and renovate buildings and neighbourhoods using low-carbon materials, optimising the design of our structures and taking account of their lifecycle. Because the men and women of Bouygues Construction are our most precious asset, we ensure that everyone is safe at all times, and that human rights and ethical standards are respected. Finally, we are committed to ensuring that everyone can achieve their full potential in their work by building a career path that reflects the values we hold dear: respect, commitment, pioneering and sharing.

NCC

ncc.com

NCC is one of the leading construction companies in the Nordics. Based on its expertise in managing complex construction processes, NCC contributes to a positive impact of construction for its customers and society. NCC is one of the largest players in the Nordic construction market, and operates in Sweden, Norway, Denmark and Finland. Operations include building and infrastructure project contracting, asphalt and stone materials production, and commercial property development. In 2024, NCC had a turnover of about SEK 62 bn and 11,800 employees. NCC Infrastructure We build infrastructure for travel, transportation, energy and water throughout the Nordic region. NCC Building Sweden Builds and renovates sustainable housing, offices, healthcare buildings, schools, sports facilities and public buildings for public and private customers in Sweden. NCC Building Nordics Builds and renovates sustainable housing, offices, healthcare buildings, schools, sports facilities and public buildings for public and private customers in Denmark, Finland and Norway. NCC Industry Offers products and services for construction and infrastructure projects in Sweden, Norway, Denmark and Finland. Operations comprise production of stone materials and asphalt products and paving works. NCC Property Development Develops and sells commercial properties in defined growth markets in the Nordic region. NCC Green Industry Transformation In 2024, NCC established a new business area, NCC Green Industry Transformation, that will support industry players in the green transition. We as a company will never become better than our employees. One of our main objectives is therefore to be the industry leader in recruiting, retaining and developing employees. NCC can offer you a varied work life, with unique construction projects and inspiring challenges. Welcome to a corporate culture based on clear values and a strong team spirit.

United Rentals

unitedrentals.com

As North America’s largest equipment rental company, with 1600+ stores across North America, Europe, Australia and New Zealand, we serve construction and industrial companies, utilities, municipalities, homeowners, and communities, with the goal of fulfilling customer needs and surpassing expectations. We go beyond equipment. We are the world’s largest fleet of problem solvers, with best-in-class specialty solutions, safety training and 24/7 support to empower your success. For more updates - Follow us on Twitter: www.UnitedRentals.com/Twitter Like us on Facebook: www.UnitedRentals.com/Facebook Join us on Google+: www.UnitedRentals.com/Google See more videos: www.UnitedRentals.com/YouTube

VINCI

cb vinci.com

VINCI is a world leader in concessions, energy and construction, employing 280.000 people in more than 120 countries. We design, finance, build and operate infrastructure and facilities that help improve daily life and mobility for all. Because we believe in all-round performance, above and beyond economic results, we are committed to operating in an environmentally and socially responsible manner. You can be part of projects that bring lasting change to urban ecosystems and entire regions. Join the team!

Skanska

skanska.com

Skanska Group uses knowledge & foresight to shape the way people live, work, and connect. More than 138 years in the making, we’re one of the world’s largest development and construction companies, with 2024 revenue totaling SEK 177 billion. We operate in select markets throughout the Nordics, Europe and the United States. Together with our customers and the collective expertise of our 26,300 + teammates, we create innovative and sustainable solutions that support healthy living beyond our lifetime. Founded in Sweden in 1887 as a maker of concrete, we were driven by a dual purpose: to innovate and build what’s good for people and society. Today we develop, design and build everything from healthy and green office buildings to smart homes and infrastructure. We partner to innovate, and we continue to hold our founding values at the heart of everything we do. Skanska Linkedin Page House Rules We welcome and encourage participation. However, there are some rules we ask everyone to follow in order to maintain a friendly and respectful community. We will remove any posted content that is not aligned with Skanska's values and Code of Conduct, including: Text, images or video containing profanity, sexually graphic or offensive language, spam, illegal content – laws that govern the use of copyrights, trade secrets, etc. will be followed.

KEC International Ltd.

kecrpg.com

KEC International Limited, the flagship company of RPG Enterprises is a diversified global infrastructure Engineering, Procurement & Construction (EPC) major, with a presence in the verticals of Power Transmission & Distribution, Railways, Civil, Urban Infrastructure, Oil & Gas Pipelines, Solar, Smart Infra and Cables. KEC is a USD 2.4 billion diversified infrastructure EPC major building infrastructure globally. With over seven decades of experience, footprint in 110+ countries and presently executing projects in 30+ countries, KEC has made an indelible mark on the world map. Through constant and consistent re-engineering KEC reinvents itself to retain its leadership position in the areas of quality, technology, capacity and capability. KEC's strengths lie in the areas of Design, Manufacturing, Supply and Construction of Turnkey Projects of Power Transmission lines of voltages up to 1,200 kV, in setting up Sub-stations and power Distribution Networks, Optical Fibre Cable (OPGW) installations, turnkey railway infrastructure, civil infrastructure projects & renewable energy projects. KEC has one of the largest global annual production capacities of 4,22,000 MTs, which includes the production of towers, poles, hardware, structures for railways & solar. The company has 8 factories in India, UAE and the Americas. The Company has over 9,000 employees from 35+ nationalities.

Consolidated Contractors Company

ccc.net

Consolidated Contractors International company is a leading diversified company carrying out construction, engineering, procurement, development and investment activities internationally. We are committed to providing reliable, amicable, and professional service to our valuable clients, and to being supportive to local businesses and social activities, being friendly to the environment as well as being proactive in the socio-economic environments within which we operate. Our appreciation of our clients' interests, evidenced by meeting their requirements and ensuring high quality work, is the prime directive of our management. Our growth and profitability are maintained through innovation, technical enhancement, and adaptability to all our markets. Our profitability is directed towards sustaining growth and to providing satisfactory returns to our shareholders. Our commitment to growth is firmly linked to our commitment to our employees' continuous development and rewarding careers. We are also devoted to our employee's safety and health, job security, and welfare. Our strength emanates from our distinct culture, strong and close relationships with our clients, employees' competence and loyalty, entrepreneurial and flexible management, capability, dynamism, focus on quality and safety, and commercial acumen.

VINCI Construction

vinci-construction.com

Premier groupe français et acteur mondial de premier plan de la construction, VINCI Construction réunit plus de 830 entreprises et près de 69000 collaborateurs dans une centaine de pays. Ses expertises s’étendent à l’ensemble des métiers du bâtiment, du génie civil, et des activités spécialisées associés à la construction VINCI Construction se caractérise, outre l’étendue de sces expertises, par un modèle économique articulé en trois composantes complémentaires. Un réseau de filiales locales :  - en France, avec VINCI Construction France, qui dispose en métropole d’un réseau solidement ancré de 450 centres de profit, et VINCI Construction Dom-Tom, représenté par une trentaine de filiales locales implantées dans les départements, territoires et collectivités d’outre-mer ;  - à l’international, avec VINCI Construction UK au Royaume-Uni; avec Warbud, SMP, Prumstav, SMS et APS Alkon en Europe centrale et enfin avec Sogea-Satom en Afrique ; Des métiers de spécialités exercés à l’échelle mondiale : Soletanche Freyssinet (fondations et technologies du sol, structures, nucléaire) ; Entrepose Contracting (infrastructures parapétrolières et gazières) ; Une division dédiée au management et à la réalisation de projets complexes, avec VINCI Construction Grands Projets, VINCI Construction Terrassement et Dodin Campenon Bernard, qui interviennent sur le marché des grands ouvrages de génie civil et de bâtiment, en France et à l’international. VINCI Construction est le creuset de la culture d’entrepreneur du Groupe et de son schéma de management, qui conjugue décentralisation, travail en réseau, autonomie et responsabilité individuelle de l’encadrement, valorisation des hommes et réactivité des organisations.

Loading…

NEWS

Ravago Building Solutions Turkiye CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…