CVE-2024-8969 - The SYSCOM Group OMFLOW - Exposure of Sensitive Data

Back Back to CVE browser

MEDIUM

The SYSCOM Group OMFLOW - Exposure of Sensitive Data

Published Sep 18, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.46%

Description

OMFLOW from The SYSCOM Group has a vulnerability involving the exposure of sensitive data. This allows remote attackers who have logged into the system to obtain password hashes of all users and administrators.

Affected products

Vendor The SYSCOM Group Product Omflow Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1.2.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

The SYSCOM Group

Omflow

unaffected

Version	Status	Constraints
0	affected	<1.2.0

Remediation

Vendor solution

Update to version 1.2.1 or later.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://www.twcert.org.tw/en/cp-139-8101-193d8-2.html
third-party-advisory
https://www.twcert.org.tw/tw/cp-132-8100-f6827-1.html
third-party-advisory

Link	Providers	Tags
https://www.twcert.org.tw/en/cp-139-8101-193d8-2.html		third-party-advisory
https://www.twcert.org.tw/tw/cp-132-8100-f6827-1.html		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner twcert

Published Sep 18, 2024

Updated Sep 18, 2024

Reserved Sep 18, 2024

Link CVE-2024-8969

CISA Vulnrichment

Updated Sep 18, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-8969

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-8969