CVE-2017-15918

CVE-2017-15918 affects Sera 1.2 on macOS. It stores the user’s login password in plain text in the home directory, specifically at ~/Library/Preferences/no.ignitum.SeraOSX.plist, enabling local privilege escalation and potential dumping of the user and system keychains. The connected documents co...