https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:31:30.260154+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-39422 CVE-2023-39422 — Use of Hard-coded Credentials in multiple /irmdata/api/ endpoints 2026-10-06T10:31:30.276746+00:00

Affected: Resort Data Processing, Inc. IRM Next Generation

The /irmdata/api/ endpoints exposed by the IRM Next Generation booking engine authenticates requests using HMAC tokens. These tokens are however exposed in a JavaScript file loaded on the client side, thus rendering this extra safety mechanism useless.