This vulnerability (CWE-532) involves the insertion of sensitive information, specifically Server Admin credentials, into log files on Genetec Security Center main servers. An attacker with local operating system privileges on the main server could exploit this to gain access to these credentials. The issue was discovered by a third party hired by Genetec. The vulnerability is tied to specific installation package builds rather than solely by product version numbers, as some versions (5.10.4.0, 5.11.3.0, 5.12.2.0, 5.13.3.0) include both vulnerable and remediated builds. Exposure determination requires checking installation package hashes against a list of fixed build hashes. No active exploitation has been reported.

An attacker with local OS privileges on the main server can access Server Admin credentials, potentially leading to full compromise of the Security Center environment. The vulnerability has a CVSS 3.1 score of 7.8, indicating high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability is tied to specific installation package builds rather than version numbers alone, organizations must verify their installed build hashes against the vendor-provided list of fixed build hashes to determine exposure. Only installations performed with vulnerable builds are affected. No official fix or patch information is currently provided in the advisory.