TVN ID	TVN-202409020
CVE ID	CVE-2024-8780
CVSS	6.5 (Medium) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products	OMFLOW from version 1.1.6.0 to 1.2.1.2
Description	OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of other users.
Solution	Update to version 1.2.1.3 or later.
Credit	Sideman (DEVCORE)
Public Date	2024-09-13