CVE-2023-39421 (published 2023-09-07T12:19:18.313Z)
The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. These keys allow unrestricted interaction with these services.
Affected products: Vendor: Resort Data Processing, Inc.
Product: IRM Next Generation
Versions: 5.4.1.23