CVE-2006-5600

Axalto Protiva 1.1 (possibly non-commercial versions) stores passwords in plaintext in files with insecure permissions. Local attackers can gain privileges by reading sensitive data from (1) KeyTool\keytool.config or (2) webapps\protiva\WEB-INF\classes\authserver.config. Root cause appears to be ...