Description
A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hamastar Technology | MeetingHub Paperless Meetings | 2021 | — |
References
- https://zuso.ai/advisory/za-2024-03 third-party-advisory