Approved changes feed: RSS · Atom
cpe:2.3:a:aptos:wisal:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aptos (fb313232-fd93-52a4-a6bc-c52aa34c1004) |
|---|---|
| Product | Wisal (1705c649-c3cb-5658-8940-d399e87b1f3b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-36049 |
vulnerable | 2026-06-08 06:39:43.559339 |
Details available
Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connection. This allows attackers in a machine-in-the-middle position read and write access to personally identifiable information (PII) and especially payroll data and the ability to impersonate legitimate users with respect to the audit log.
Published: 2024-05-24T16:25:38.065Z
Updated: 2025-02-13T15:59:11.240Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.