CVE-2021-25898

2021-04-2320:47:25

mitre

www.cve.org

security issue

unencrypted passwords

authentication vulnerability

high-privileged user authentication

EPSS

0.003

Percentile

71.4%

JSON

An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored in unencrypted source-code text files. This was noted when accessing the svc-login.php file. The value is used to authenticate a high-privileged user upon authenticating with the server.