Description
CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
References
- 21305 vdb-entry
- ADV-2006-4710 vdb-entry
- 22138 third-party-advisory
- crypto-ldap-information-disclosure(30557) vdb-entry