Omnis Studio 10.22.00 vulnerabilities

Omnis Studio 10.22.00 has incorrect access control, allowing 'always private' Omnis libraries to be opened. Although this feature is supposed to be an irreversible operation, implementation issues allow bypassing specific checks.

Omnis Studio 10.22.00 has incorrect access control, allowing locked classes in Omnis libraries to be unlocked. This violates the expected behavior of an 'irreversible operation', enabling actions such as deleting, viewing, or modifying these classes.

Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.