【Vulnerability Alert】Boge Information Management Consulting｜ERP App - Use of Hard-coded Credentials
publish date :
2026-07-13
update date :
2026-07-13
Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026070805075050 | Publication Time | 2026-07-08 17:19:51 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-07-08 17:19:51 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Boge Information Management Consulting｜ERP App - Use of Hard-coded Credentials |
|||
| [Content]
Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202607-00000004 【Boge Information Management Consulting｜ERP App - Use of Hard-coded Credentials】(CVE-2026-14807, CVSS: 9.8) The ERP App developed by Boge Information Management Consulting contains a Use of Hard-coded Credentials vulnerability. An unauthenticated remote attacker may obtain the database account and password from the program code. Information Sharing Level: WHITE (the intelligence content is information that may be publicly disclosed) |
|||
| [Affected Platform]
ERP App |
|||
|
[Recommended Actions] Contact the vendor for patching. |
|||
|
[Reference] |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center