WinGate contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the program stores user passwords in certain registry keywords that aren't properly encrypted. This will disclose trivially decoded password information to a local attacker.
Classification
Location:
Local Access Required
Attack Type:
Cryptographic,
Information Disclosure
Impact:
Loss of Confidentiality
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
Solution
OSVDB is not aware of a solution for this vulnerability.
