Sechard Information Technologies SecHard Authentication Bypass Vulnerability

A vulnerability in SecHard by Sechard Information Technologies, prior to version 3.3.0.20220411, allows authentication bypass and interface manipulation. This issue arises from incorrect use of privileged APIs, cleartext transmission of sensitive information, and insufficiently protected credentials. Exploitation of this vulnerability could lead to authentication abuse and information harvesting via API event monitoring.

Impact

Exploitation of this vulnerability could allow attackers to bypass authentication, manipulate interfaces, abuse authentication mechanisms, and harvest information through monitored API events.

Remediation

Users and system administrators are advised to upgrade to version 3.3.0.20220411 or later.