Description
Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\_pack registry value.
References
- folderlock-packregistry-info-disclosure(44575) vdb-entry
- 30771 vdb-entry
- 20080820 Folder Lock <= 5.9.5 Local Password Information Disclosure mailing-list
- 4183 third-party-advisory
- 31559 third-party-advisory