Description (CNA)
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The SYSCOM Group / OMFLOW | affected 1.1.6.0 through 1.2.1.2 |
CWE
CWE-200
References
- https://www.twcert.org.tw/tw/cp-132-8071-46589-1.html
- https://www.twcert.org.tw/en/cp-139-8072-928a5-2.html
ADP enrichment
No English description supplied.
No references supplied.