CVE-2024-8777CWE-200

The SYSCOM Group OMFLOW - Information Leakage

High · published September 16, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00543 · 44.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-09-16T05:44Z
EPSS history
Timeline
  • 16 SEP 05:44Z
    The SYSCOM Group OMFLOW - Information Leakage
    cvelistv5