Unscored CVE-2019-10239 EUVD-2019-2250GHSA-v2p9-6999-7fj7

Robotronic RunAsSpc 3.7.0.0 protects stored credentials insufficiently, which allows locally authenticated attackers (under the same user c…

Published Apr 24, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

Robotronic RunAsSpc 3.7.0.0 protects stored credentials insufficiently, which allows locally authenticated attackers (under the same user context) to obtain cleartext credentials of the stored account.

References

https://blog.to.com/advisory-runasspc-cve-2019-10239/