CVE-2023-39420

The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL file. Once reverse-engineered, this routine can help an attacker generate the daily password and connect to application customers. Given that this is an administrative account, anyone logging into a customer deployment has full, unrestricted access to the application.

• CWE-798

• https://bitdefender.com/blog/labs/check-out-with-extra-charges-vulnerabilities-in-hotel-booking-engine-explained/Third Party Advisory
• https://bitdefender.com/blog/labs/check-out-with-extra-charges-vulnerabilities-in-hotel-booking-engine-explained/Third Party Advisory

Published

Sep 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39415Improper authentication vulnerability in Proself Enterprise/…7.5
• CVE-2023-39416Proself Enterprise/Standard Edition Ver5.61 and earlier, Pro…7.2
• CVE-2023-39417IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was f…8.8
• CVE-2023-39418A vulnerability was found in PostgreSQL with the use of the …4.3
• CVE-2023-39419A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-3942An 'SQL Injection' vulnerability, due to improper neutraliza…7.5
• CVE-2023-39421The RDPWin.dll component as used in the IRM Next Generation …7.7
• CVE-2023-39422The /irmdata/api/ endpoints exposed by the IRM Next Generati…9.8
• CVE-2023-39423The RDPData.dll file exposes the /irmdata/api/common endpoin…9.1
• CVE-2023-39424A vulnerability in RDPngFileUpload.dll, as used in the IRM N…8.8
• CVE-2023-39425Improper access control in some Intel(R) DSA software before…7.8
• CVE-2023-39427 In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt …7.8