Description
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Digiwin | EasyFlow GP | 5.8.8.3 – ≤ 5.8.11.1.0810112, 8.1.* – ≤ 8.1.1.2 | — |
References
- https://www.twcert.org.tw/tw/cp-132-10503-a66fe-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10504-23f4c-2.html third-party-advisory