Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfx7-932x-94fg

Опубликовано: 27 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.2

Описание

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump and then they can be used to activate the software on the same machine without purchasing.

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump and then they can be used to activate the software on the same machine without purchasing.

EPSS

Процентиль: 1%
0.00008
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-316

Связанные уязвимости

CVSS3: 6.2
nvd
3 месяца назад

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump and then they can be used to activate the software on the same machine without purchasing.

EPSS

Процентиль: 1%
0.00008
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-316