CyberRota Analysis
AI-GeneratedThe Ozols Grupa OZOLS software on Windows is vulnerable due to an abandoned auto-update domain, allowing the download of code without integrity checks and the transmission of sensitive information in cleartext. This critical vulnerability could lead to unauthorized code execution and data exposure, making it imperative for organizations using versions prior to 1.1.1233 to prioritize immediate remediation. Users of the OzolsSQL client should take action to mitigate potential risks associated with this flaw.
Original NVD Description
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update path, the <db>_update SQL Server Agent job (@subsystem = N'ActiveScripting') and serv_update.vbs. This issue affects OZOLS: before 1.1.1233.