PT-2023-25123 · Infodrom · Infodrom Software E-Invoice Approval System

Gokhan Uygan · Publicado 2023-07-25 · Atualizado 2026-05-22 · CVE-2023-35067

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Infodrom Software E-Invoice Approval System versions prior to 20230701

Description The issue affects the Infodrom Software E-Invoice Approval System, where a Plaintext Storage of a Password vulnerability allows reading sensitive strings within an executable.

Recommendations For versions prior to 20230701, update to version 20230701 or later to resolve the issue.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

CWE-256

Identificadores relacionados

CVE-2023-35067

Produtos afetados

Infodrom Software E-Invoice Approval System

Referências · 8

• https://t.me/cveNotify/164527 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-35067 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-35067 · Nota de Segurança
• https://t.me/cvenotify/56575 · Publicação no Telegram
• https://usom.gov.tr/bildirim/tr-23-0419 · Nota
• https://t.me/cvenotify/55052 · Publicação no Telegram
• https://t.me/cibsecurity/67215 · Publicação no Telegram
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0419 · Nota