SANS
DATENLECK
27. Juli 2026
Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)
ESAFENET's CDG showed up in our data before. The company focused on secure document management and data leakage prevention solutions. The „CDG“ stands for „Content Data Guard“, and the product appears to be mostly targeting the Chinese market [1]. Sadly, like so many security products, it suffers from basic security vulnerabilities like SQL Injection, XSS, and default passwords. We have seen scanning for ESAFENET CDG before, in particular after the cross-site scripting vulnerability was made public.