EIP-2026-103776

This advisory details a cryptographic weakness in Google Active Directory Sync (GADS) Tool, where hardcoded salt and iteration count in the PBEwithMD5andDES algorithm allow decryption of stored credentials. The proof of concept includes specific values (salt, iteration count, secret key) to decrypt passwords from XML configuration files.