CVE-2006-6145

CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6145

CRYPTOCard CRYPTO-Server (before 6.4.56) stores LDAP credentials in plaintext in UninstallerData\installvariables.properties with insecure file permissions, allowing local users to obtain the credentials. This is documented in CVE-2006-6145 and corroborated by related Nessus findings. The vulnera...