CVE-2024-8780 - CVE House

Status published Medium CVE-2024-8780

The SYSCOM Group OMFLOW - Improper Authorization for Data Query Function

6.5 CVSS

Vulnerability Description

OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of other users.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8780

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from The SYSCOM Group

View All →

CVE-2024-8969

The SYSCOM Group OMFLOW - Exposure of Sensitive Data

Medium 6.5

CVE-2024-8779

The SYSCOM Group OMFLOW - Broken Access Control

High 8.8

CVE-2024-8778

The SYSCOM Group OMFLOW - Arbitrary File Read

Medium 6.5

CVE-2024-8777

The SYSCOM Group OMFLOW - Information Leakage

High 7.5

Affected Vendor

The SYSCOM Group

View all reports →

Affected Software

OMFLOW

Vulnerable Versions:

1.1.6.0

Timeline

Official Publish: September 16th, 2024

Last Modified: September 16th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

Collection

T1005 Data from Local System