CVE-2024-8777
HIGHOMFLOW - Info Disclosure
Title source: llmDescription
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.
Scores
CVSS v3
7.5
EPSS
0.0017
EPSS Percentile
37.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-522
CWE-200
Status
published
Affected Products (1)
syscomgo/omflow
< 1.2.1.3
Timeline
Published
Sep 16, 2024
Tracked Since
Feb 18, 2026