PcwRunAs 0.4 Password Obfuscation Design Flaw

Vuln Title: PcwRunAs Password Obfuscation Design Flaw Date: 26.03.2012 Author: Christian Landström, otr Software Link: http://www.pcwelt.de/downloads/pcwRunAs-1215998.html Version: = 0.4 Tested on: Windows CVE : CVE-2012-1793 Risk: high Type: Privilege Escalation Vendor: PC-Welt Timeline:...

CVE-2012-1793: PCWELT PcwRunAsGui and PcwRunAs information disclosure

The CVE-2012-1793 entry concerns PC-Welt’s PcwRunAsGui and PcwRunAs. A design flaw in the password obfuscation allows a local attacker to recover or decrypt passwords encrypted by pcwRunAsGui.exe, effectively exposing sensitive credentials from the RunAs workflow. The PacketStorm entry classifies...