Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)

This post was originally published on this site

ESAFENET's CDG showed up in our data before. The company focused on secure document management and data leakage prevention solutions. The "CDG" stands for "Content Data Guard", and the product appears to be mostly targeting the Chinese market [1]. Sadly, like so many security products, it suffers from basic security vulnerabilities like SQL Injection, XSS, and default passwords. We have seen scanning for ESAFENET CDG before, in particular after the cross-site scripting vulnerability was made public.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.