Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in Dataedo Portal 26.2.8 together with Dataedo Agent 26.2.8, the closed-source enterprise data-catalog and data-governance platform from Dataedo sp. z o.o. (Poland). Both components are in scope because the chain crosses from one to the other: the Portal discloses a database credential, and the separately installed Agent executes an injected scheduler job on its own host. In the...