Streamsoft Prestiż Weak Encoding Vulnerability in KSeF Token Allowing Token Guessing

A vulnerability exists in Streamsoft Prestiż software versions 12.2.363.17 through 20.0.380.91, due to the use of a custom token encoding algorithm. This flaw allows the KSeF (Krajowy System e-Faktur) token value to be guessed by analyzing the encoding of tokens with known values. The vulnerability is categorized as weak encoding for passwords.

Impact

Exploitation of this vulnerability could lead to unauthorized guessing of KSeF token values, potentially allowing for manipulation or unauthorized actions within the KSeF system.

Remediation

Users can upgrade to Streamsoft Prestiż version 20.0.380.92 or later to address this vulnerability.