NetSight
high7.8

CVE-2018-13014

Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and Sof…

Impact

Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.

Affected products

VendorProductAffected versions
SafensoftEnterprise Suite
before 4.4.2
SafensoftSyswatch
before 4.4.2
SafensoftTpsecure
before 4.4.2

Weakness classification

References