ESAFENET’s Security Sieve: More Holes Than Swiss Cheese!
In January, a possible XSS vulnerability was found in ESAFENET CDG. It’s the latest in a long line of “secure” document management hiccups. With SQL issues and encryption woes already on the list, it’s clear that safety takes a backseat to suspense in this security thriller, targeting the Chinese market.
Hot Take:
Looks like the ESAFENET CDG security management system has more holes than a slice of Swiss cheese! Another XSS vulnerability has been discovered, adding to its already impressive resume of security blunders. It’s unclear if the system is effective at securing documents, but it definitely seems to excel at keeping cybersecurity experts busy. If you’re using ESAFENET CDG, you might want to consider investing in a good old-fashioned safe. At least those are less likely to have SQL injection issues!
Key Points:
- An XSS vulnerability was discovered in ESAFENET CDG’s SystemConfig.jsp.
- The system has a history of security issues, including SQL injection and weak encryption.
- Targeting the Chinese market, ESAFENET CDG’s website is fully in Chinese.
- Information about the vulnerability is sparse, with incomplete NVD entries and no available patches.
- The GitHub repository with the vulnerability details has mysteriously vanished.