Omikron MultiCash 4.00.008 Service Pack 5
Approved changes feed: RSS · Atom
cpe:2.3:a:omikron:multicash:4.00.008:sp5:*:*:*:*:*:*part: a version: 4.00.008 update: sp5
| Vendor | Omikron (12a7a0e3-1a78-5ab5-943b-33beaee9f7ea) |
|---|---|
| Product | Multicash (2fa7d091-9f39-5b35-9a36-e448f1ca7b02) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-41286 |
vulnerable | 2026-06-08 05:35:20.117535 |
Details available
Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a debugger to the process or create a patch that manipulates the behavior of the login function. When the function always returns the success value (corresponding to a correct password), an attacker can login with any desired account, such as the administrative account of the application.
Published: 2021-10-05T15:30:41.000Z
Updated: 2024-08-04T03:08:32.019Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.