Default Credentials Vulnerability in Tosei Online Store Management System

CVE-2024-7898

Summary

A serious security vulnerability has been identified in versions 4.02, 4.03, and 4.04 of the Tosei Online Store Management System. This flaw resides in the Backend component and allows attackers to exploit the use of default credentials. The vulnerability can be exploited remotely, providing unauthorized users access to sensitive areas of the system. Public disclosure of this issue has raised concerns about its potential exploitation. Despite early notification efforts to Tosei, there has been no response from the vendor addressing the vulnerability. It is crucial for users of the affected versions to review their systems for this security risk and take appropriate measures to secure their installations.

References