published June 19, 2019
⚠️ A sneaky data leak awaits! With just a crafted EMP_NO, attackers can pull user passwords without breaking a sweat — no authentication needed! 🔥 Think of it like a restaurant where anyone can walk up to the counter and read off the customer orders visible to everyone, all without needing to place an order themselves. It's a recipe for disaster! An attacker could exploit this vulnerability to access sensitive user passwords, potentially leading to account takeovers and unauthorized access. Since no authentication is required, this could happen to any user of the system, causing immense harm and loss of trust.
Think of it like a restaurant where anyone can walk up to the counter and read off the customer orders visible to everyone, all without needing to place an order themselves. It's a recipe for disaster! This vulnerability in EXCELLENT INFOTEK BiYan versions 1.57 to 2.8 allows for an unauthorized information leak through the kws_login/asp/query_user.asp endpoint, where an attacker can send a specific EMP_NO and retrieve the user’s password from the PWD element.
An attacker could exploit this vulnerability to access sensitive user passwords, potentially leading to account takeovers and unauthorized access. Since no authentication is required, this could happen to any user of the system, causing immense harm and loss of trust. Update to the latest version of the EXCELLENT INFOTEK BiYan software immediately to close this gap. Implement strict input validation to ensure only authorized requests can access sensitive user information. Regularly audit your systems for similar vulnerabilities in the future. You've got this! By following these steps, you'll enhance your security and protect your users! 🛡️