Description
Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AxxonSoft | AxxonNet ARP Agent C-WerkNet | ≤ 2.0.4 | — |