Arbitrary System File Read Remote Vulnerability in OMFLOW

CVE-2024-8778

What is CVE-2024-8778?

OMFLOW, a product from The SYSCOM Group, is susceptible to an input validation issue that occurs during its download functionality. This flaw permits remote attackers, even with limited privileges, to exploit the vulnerability and gain access to arbitrary system files. The impact of this vulnerability could lead to unauthorized information disclosure, posing significant risks to system integrity and confidentiality. Users of OMFLOW should take immediate action to apply patches and secure their systems against potential exploitation.

References