CVE-2025-60791

CVE-2025-60791 CVE-2025-60791：内存中敏感信息的明文存储。 Easywork Enterprise 2.1.3.354 存在内存中敏感信息明文存储的漏洞。该应用程序在激活尝试失败后，会将有效的设备绑定许可证密钥留在进程内存中。攻击者可通过附加调试器或分析进程/内存转储来获取这些密钥，随后无需购买即可在同一台机器上激活该软件。...

CVE-2025-60791

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump an...

PT-2025-43983

Name of the Vulnerable Software and Affected Versions Easywork Enterprise version 2.1.3.354 Description Easywork Enterprise version 2.1.3.354 exhibits a security issue related to the cleartext storage of sensitive information in memory. Specifically, valid device-bound license keys remain in...

📄 Easywork Enterprise 2.1.3.354 Cleartext Memory Secret Storage

Easywork Enterprise version 2.1.3.354 is vulnerable to cleartext storage of sensitive information in memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory...