CVE-2023-35067 Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System
Attackers can read sensitive strings from the executable to obtain plaintext passwords, compromising the E-Invoice Approval System.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-35067?
CVE-2023-35067 is a high-severity vulnerability in Infodrom Software E-Invoice Approval System, published on 25 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable.
This issue affects E-Invoice Approval System: before v.20230701.
Which versions are affected by CVE-2023-35067?
It affects 1 product.
Products include Infodrom E-Invoice Approval System.
How do I fix CVE-2023-35067?
No fix has been published for CVE-2023-35067 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-35067 being exploited?
There is no known exploitation of CVE-2023-35067 in the wild and no public exploit code.
Other vulnerabilities in Infodrom Software E-Invoice Approval System
Sources
Also known as GHSA-hrhg-9qv8-cwj7.