Digiwin EasyFlow GP Insufficiently Protected Credentials Vulnerability

A vulnerability allowing privileged remote attackers to access plaintext database account credentials from the system frontend has been identified in Digiwin's EasyFlow GP. This issue arises from insufficient protection of credentials, enabling exploitation by attackers with elevated privileges.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive database credentials, which could be misused to manipulate or extract data from the database.

Remediation

Users are advised to update EasyFlow GP version 5.8.x to 5.8.11.1.081013 or later, and version 8.1.x to 8.1.1.3 or later. For version 5.7.x, upgrade to an unaffected version or install the available patch.