DBconfigReader:泛微生态OA系统接口存在数据库配置信息扩展范围

泛微生态OA系统接口存在数据库配置信息扩展范围 /mobile/DBconfigReader.jsp http://xxxx:8090/mobile/DBconfigReader.jsp Fortify代码审计检测出-弱加密算法 SecretKey key = SecretKeyFactory.getInstance("DES").generateSecret(dks1); <%@ page language="java" contentType="text/html; charset=UTF-8"%> <%@ page import="weaver.file.Prop" %> <%@ page import="javax.crypto.spec.DESKeySpec" %> <%@ page import="javax.crypto.*" %> <% String conStr=P