EIP-2026-103776
PRE-CVEGoogle AD Sync Tool - Exposure of Sensitive Information
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103776. PoCs published by Sense of Security.
AI-analyzed exploit summary This advisory details a cryptographic weakness in Google Active Directory Sync (GADS) Tool, where hardcoded salt and iteration count in the PBEwithMD5andDES algorithm allow decryption of stored credentials. The proof of concept includes specific values (salt, iteration count, secret key) to decrypt passwords from XML configuration files.
Description
Google AD Sync Tool - Exposure of Sensitive Information
Exploits (1)
This advisory details a cryptographic weakness in Google Active Directory Sync (GADS) Tool, where hardcoded salt and iteration count in the PBEwithMD5andDES algorithm allow decryption of stored credentials. The proof of concept includes specific values (salt, iteration count, secret key) to decrypt passwords from XML configuration files.