medium5.5
CVE-2019-14477
AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database …
Impact
AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adremsoft | Netcrunch | through 11.0.0.5282 |
Weakness classification
References
- NVD record
- CVE.org record
- https://compass-security.com/fileadmin/Research/Advisories/2020-11_CSNC-2019-012_AdRem_NetCrunch_Improper_Credential_Storage.txt
- https://www.adremsoft.com/support/
- https://compass-security.com/fileadmin/Research/Advisories/2020-11_CSNC-2019-012_AdRem_NetCrunch_Improper_Credential_Storage.txt
- https://www.adremsoft.com/support/