Description
AuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to LaytonCmdSvc.log, which allows local users to obtain sensitive information by reading the file.
References
- auditwizard-remoteaudit-password-disclosure(28743) vdb-entry
- 20060905 AuditWizard 6.3.2 gives away administrator password mailing-list
- 21773 third-party-advisory
- ADV-2006-3498 vdb-entry
- 1525 third-party-advisory
- 1016795 vdb-entry
- 19860 vdb-entry