CVE-2024-8969

Published: Sep 18, 2024Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: twcert@cert.org.tw (Secondary)

Description

OMFLOW from The SYSCOM Group has a vulnerability involving the exposure of sensitive data. This allows remote attackers who have logged into the system to obtain password hashes of all users and administrators.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://www.twcert.org.tw/en/cp-139-8101-193d8-2.html

Source: twcert@cert.org.tw

https://www.twcert.org.tw/tw/cp-132-8100-f6827-1.html

Source: twcert@cert.org.tw

Timeline

No history available yet.