> CVE-2025-60791

« BACK_TO_HOME
PUBLISHED
2025-10-27 16:15
MODIFIED
2025-10-27 16:15
EPSS (Prob. Exploit)
0.11%
Top 98.8%
DATA SOURCES:
NVD 🔗 2025-10-27 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump and then they can be used to activate the software on the same machine without purchasing.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/10/2025 16:15
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://packetstorm.news/files/id/210832
https://sourceforge.net/projects/easyworkaccounting/
« BACK_TO_HOME