Meon KYC Solutions Information Disclosure Vulnerability

A vulnerability allowing the transmission of sensitive data in plain text has been identified in Meon KYC Solutions version 1.1. This issue arises within the response payloads of certain API endpoints, where unencrypted sensitive information belonging to users can be intercepted. An authenticated remote attacker could exploit this vulnerability to access and misuse this information, potentially leading to impersonation of the target user and unauthorized access to their account.

Impact

Exploitation of this vulnerability could allow an authenticated remote attacker to intercept unencrypted sensitive information from API responses, leading to unauthorized access to other users' accounts.

Remediation

Users are advised to upgrade Meon KYC Solutions to version 1.2.