OSVDB ID: 15421 Title: DeluxeFTP sites.xml Cleartext Password Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
DeluxeFTP contains a flaw that may lead to an unauthorized information. It is possible to gain access to the plain text username and password of the FTP sites configured when the program writes its configuration to the sites.xml file, which may lead to a loss of confidentiality |
Classification |
Location:
Local Access Required
Attack Type: Authentication Management, Cryptographic, Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
gmail.com -