CVE-2018-13014 Hardcoded credentials in n/a
Local attackers can recover stored passwords from the database to modify program settings in SysWatch security software.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13014?
CVE-2018-13014 is a high-severity vulnerability in n/a, published on 29 Jun 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.
Weakness: CWE-522
Which versions are affected by CVE-2018-13014?
It affects 3 products.
Products include Safensoft Enterprise Suite, Safensoft Syswatch, Safensoft Tpsecure.
How do I fix CVE-2018-13014?
No fix has been published for CVE-2018-13014 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-13014 being exploited?
There is no known exploitation of CVE-2018-13014 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-95mp-cpcj-98xf.