high7.7
CVE-2023-39421
The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Von…
Impact
The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Resortdata | Internet Reservation Module Next Generation | Version 5.4.1.23 |