high7.8
CVE-2018-13014
Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and Sof…
Impact
Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Safensoft | Enterprise Suite | before 4.4.2 |
| Safensoft | Syswatch | before 4.4.2 |
| Safensoft | Tpsecure | before 4.4.2 |