PT-2023-25123 · Infodrom · Infodrom Software E-Invoice Approval System

Gokhan Uygan · Published 2023-07-25 · Updated 2026-05-22 · CVE-2023-35067

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Infodrom Software E-Invoice Approval System versions prior to 20230701

Description The issue affects the Infodrom Software E-Invoice Approval System, where a Plaintext Storage of a Password vulnerability allows reading sensitive strings within an executable.

Recommendations For versions prior to 20230701, update to version 20230701 or later to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-256

Related Identifiers

CVE-2023-35067

Affected Products

Infodrom Software E-Invoice Approval System

References · 8

• https://osv.dev/vulnerability/CVE-2023-35067 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35067 · Security Note
• https://t.me/cveNotify/164527 · Telegram Post
• https://t.me/cvenotify/56575 · Telegram Post
• https://usom.gov.tr/bildirim/tr-23-0419 · Note
• https://t.me/cvenotify/55052 · Telegram Post
• https://t.me/cibsecurity/67215 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0419 · Note