CVE-2006-6145

CRYPTOCard CRYPTO-Server (before 6.4.56) stores LDAP credentials in plaintext in UninstallerData\installvariables.properties with insecure file permissions, allowing local users to obtain the credentials. This is documented in CVE-2006-6145 and corroborated by related Nessus findings. The vulnera...