CVE-2021-41286

Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a...

CVE-2021-41286

Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a...

CVE-2021-41286

Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a...

CVE-2021-41286

CVE-2021-41286 affects Omikron MultiCash Desktop 4.00.008.SP5. The issue arises from a client-side authentication mechanism where the password’s validity is checked locally, and all database communications go through a single technical account. This enables an attacker to attach a debugger to the...

PT-2021-23241

Name of the Vulnerable Software and Affected Versions Omikron MultiCash Desktop version 4.00.008.SP5 Description The issue arises from a client-side authentication mechanism. When a user logs in, the password validity is checked locally. All database backend communication uses the same technical...

CVE-2021-41286: Improper Authentication

Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a...