An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.

Published Feb 9, 2021 · Updated Aug 3, 2024 · Assigned by mitre