Cleartext Storage of Sensitive Information
CVE-2021-37468
Summary
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
- LOW
- LOCAL
- NONE
- UNCHANGED
- NONE
- LOW
- LOW
- NONE
CWE-312 - Cleartext Storage of Sensitive Information
The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
References
Advisory Timeline
- Published