Design/Logic Flaw

2021-07-2521:15:00

PRIOn knowledge base

www.prio-n.com

3.8 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.

CPENameOperatorVersion
reflect_customer_relationship_managementle3.01

CPE	Name	Operator	Version
	reflect_customer_relationship_management	le	3.01

References

github.com/0xfml/poc/blob/main/NCH/ReflectCRM_3.01_CC.md

www.nchsoftware.com/crm/index.html