Skip to content
OpenAdvisories

Vendor

Resort Data Processing

5 known vulnerabilities.

Products

IRM Next Generation 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-39422

    Use of Hard-coded Credentials in multiple /irmdata/api/ endpoints

    The /irmdata/api/ endpoints exposed by the IRM Next Generation booking engine authenticates requests using HMAC tokens. These tokens are however exposed in a JavaScript file loaded on the client side, thus rendering this extra safety mechanism useless.

    Resort Data Processing IRM Next Generation