high7.8
CVE-2018-18656
The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext.
Impact
The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Purevpn | Purevpn | before 6.1.0 |