Threats tagged 'ghsa-73r7-q94j-p98r'

AxxonSoft Axxon One versions before 3.1.0 on Windows and Linux store the LDAP directory service account password in plaintext within the SecurityManager shared configuration file main.conf. This allows a local attacker with read access to the configuration directory or backups to retrieve the password. The vulnerability has a medium severity with a CVSS score of 5.5.