Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)

Read full story on SANS Internet Storm Center
Share
Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)
AI disclosure

Summary

ESAFENET&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s CDG showed up in our data before. The company focused on secure document management and data leakage prevention solutions. The "CDG" stands for "Content Data Guard", and the product appears to be mostly targeting the Chinese market [1]. Sadly, like so many security products, it suffers from basic security vulnerabilities like SQL Injection, XSS, and default passwords. We have seen scanning for ESAFENET CDG before, in particular after the cross-site scripting vulnerability was made public.

Original reporting

Open original source

Related coverage

Read full article on SANS Internet Storm Center

Get the AFBytes Brief

Major stories, AI-assisted analysis, and what to watch next. Free, monthly, unsubscribe anytime.