Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mj3g-5jvr-4w7h

Опубликовано: 03 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.

?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.

EPSS

Процентиль: 11%
0.00038
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-256
CWE-312

Связанные уязвимости

CVSS3: 6.5
nvd
больше 2 лет назад

​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.

EPSS

Процентиль: 11%
0.00038
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-256
CWE-312