Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/25 12:00 a.m.•3 views

CVE-2022-22789: Cleartext Storage of Sensitive Information

Charactell - FormStorm Enterprise Account takeover – An attacker can modify add, remove and update passwords file for all the users. The xxusers.ini file in the FormStorm folder contains usernames in cleartext and an obfuscated password. Malicious user can take over an account by replacing existi...

7.8CVSS5.8AI score0.00151EPSS
SaveExploits0References2
Rows per page
Query Builder