Recoverable Password Storage Vulnerability in SAFE'N'SEC SoftControl/SafenSoft SysWatch

CVE-2018-13014 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.

Learn more about our Web Application Penetration Testing UK.