NetSight
critical9.8

CVE-2017-9615

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes th…

Impact

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file.

Affected products

VendorProductAffected versions
CognitoMoneyworks
through 8.0.3

Weakness classification

References