CVE-2024-56428

The itech iLabClient 3.7.1 software contains a vulnerability where local attackers can read cleartext credentials from the CONFIGS table within the local iLabClient database. The software uses an Apache Derby instance to store configuration data, where passwords are saved in plain text. To exploi...