CVE-2023-39421 — Use of Hard-coded Credentials in RDPWin.dll

CVE-2023-39421

Use of Hard-coded Credentials in RDPWin.dll PUBLISHED

Description (CNA)

The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services.

Affected (CNA)

Vendor / product	Versions
Resort Data Processing, Inc. / IRM Next Generation	affected 5.4.1.23

CWE

CWE-798

References

https://bitdefender.com/blog/labs/check-out-with-extra-charges-vulnerabilities-in-hotel-booking-engine-explained

ADP enrichment

CVE

No English description supplied.

https://bitdefender.com/blog/labs/check-out-with-extra-charges-vulnerabilities-in-hotel-booking-engine-explained

CISA-ADP

No English description supplied.

No references supplied.