Dec 23, 2024
1 new incident, 0 with updates.
Started
- ClosedPatched
Acclaim Systems USAHERDS Use of Hard-Coded Credentials
Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on the system that runs the application. The MachineKey must be obtained via a separate vulnerability or other channel. Added to the CISA KEV catalog on 2024-12-23. CVE-2021-44207 was assigned before 2024; the KEV listing came in 2024.
Acclaim Systems USAHERDSClosed Dec 23, 2024
