Description
The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file.
References
- 22752 vdb-entry
- socialbookmarks-password-plaintext(32721) vdb-entry
- 2368 third-party-advisory
- 34486 vdb-entry
- 20070228 Quicksilver Social Bookmark plugin v.8F: password in clear text mailing-list