Описание
The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:resortdata:internet_reservation_module_next_generation:5.4.1.23:*:*:*:*:*:*:*
EPSS
Процентиль: 17%
0.00055
Низкий
7.7 High
CVSS3
Дефекты
CWE-798
Связанные уязвимости
CVSS3: 7.7
github
больше 2 лет назад
The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services.
EPSS
Процентиль: 17%
0.00055
Низкий
7.7 High
CVSS3
Дефекты
CWE-798