Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, which is readable by local users.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Link | Tags |
---|---|
http://securitytracker.com/id?1014409 | vendor advisory exploit vdb entry third party advisory broken link |
http://secunia.com/advisories/15995 | third party advisory broken link |