Insufficiently Protected Credentials in EasyFlow GP by Digiwin

CVE-2025-13164

What is CVE-2025-13164?

EasyFlow GP, developed by Digiwin, has a notable vulnerability that compromises credential security. This vulnerability allows unauthorized remote attackers to access plaintext credentials for Active Directory and system mail through the system's frontend. Such a security flaw can lead to serious breaches of information confidentiality, exposing sensitive data to malicious actors. Organizations using EasyFlow GP are advised to apply available patches and enhance their security measures to mitigate potential risks.

References