Description
REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts.
References
- 2495 vdb-entry
- 20010320 Password stored in clear text vulnerability in real time stock trading program mailing-list
- rediplus-weak-security(6276) vdb-entry