VULNERABILITY INTELLIGENCE

CVE-2024-8780

CVSS score6.5 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2024-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of other users.

Weakness classification

  • twcert@cert.org.tw: CWE-200
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references