| Title | Newgen Software Newgen OmniDocs 12.0.00 Use of Hard-coded Cryptographic Key |
|---|
| Description | Description
Newgen OmniDocs 12.0.00 is affected by an information disclosure vulnerability through which an unauthenticated attacker can access an exposed RSA private key from a publicly reachable location within the application infrastructure. The exposure of this sensitive cryptographic material could allow misuse for unauthorized decryption, token signing, or impersonation of trusted services, thereby compromising the confidentiality and integrity of the system. |
|---|
| Source | ⚠️ https://drive.google.com/file/d/1_cBMYBQo09ZEfgF4FKXh08PneBZoBrVI/view?usp=sharing |
|---|
| User | kushkira (UID 60170) |
|---|
| Submission | 03/17/2026 11:52 (4 months ago) |
|---|
| Moderation | 04/02/2026 10:02 (16 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 354828 [Newgen OmniDocs up to 12.0.00 GetWebApiConfiguration connectionDetails information disclosure] |
|---|
| Points | 20 |
|---|