Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2023-39421

Use of Hard-coded Credentials in RDPWin.dll

Description

The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Resort Data Processing, Inc. IRM Next Generation

Default version status: unaffected

  • 5.4.1.23affected

References