Vulnerabilities

TI-2023-20563 CVE-2023-39424 · GHSA-28pf-jj6h-h694

Injection in Resort Data Processing, Inc. IRM Next Generation

MEDIUM 45

A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web shell component) to the SQL database and execute it with SYST…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00987 Published 2023-09-07 No fix listed CWE-74

TI-2023-20562 CVE-2023-39423 · GHSA-289f-922v-5266

Improper Neutralization of Special Elements used in an SQL Command in RDPData.dll

MEDIUM 46

The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0056 Published 2023-09-07 No fix listed CWE-89

TI-2023-20561 CVE-2023-39422 · GHSA-cqmf-cjvg-v539

Use of Hard-coded Credentials in multiple /irmdata/api/ endpoints

MEDIUM 48

The /irmdata/api/ endpoints exposed by the IRM Next Generation booking engine authenticates requests using HMAC tokens.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00418 Published 2023-09-07 No fix listed CWE-798

TI-2023-20560 CVE-2023-39421 · GHSA-55q7-p8m7-cchj

Use of Hard-coded Credentials in RDPWin.dll

LOW 34

The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00474 Published 2023-09-07 No fix listed CWE-798

TI-2023-20559 CVE-2023-39420 · GHSA-pw6p-wr56-q7jh

Use of Hard-coded Credentials in RDPCore.dll

MEDIUM 44

The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL fi…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00734 Published 2023-09-07 No fix listed CWE-798