CVE-2023-39422

Summary

CVE-2023-39422 reveals a vulnerability in the IRM Next Generation booking engine's /irmdata/api/ endpoints. This issue undermines the security of HMAC tokens used for authentication, as they are exposed in a client-side JavaScript file. Consequently, the protection provided by this token-based system becomes ineffective. Attackers can easily intercept these tokens, potentially gaining unauthorized access to sensitive data or functionality. Organizations utilizing the IRM Next Generation booking engine must address this vulnerability promptly to safeguard their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.