CVE-2023-26760 Information

Description

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system.

Reference

https://www.swascan.com/it/security-advisory-sme-up-erp/