Description
Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords.
References
- 4210 vdb-entry
- hotline-connect-plaintext-password(8327) vdb-entry
- 20020228 Hotline Client Plain password vuln. mailing-list