Threats tagged 'ghsa-f96f-m7rh-gphp'

A vulnerability exists in LOGO! Soft Comfort versions prior to V9 where a static, hardcoded AES master key is used to encrypt project files. This flaw allows a local attacker to extract the master key from application files or memory, enabling decryption of project files or removal of project passwords without knowing the user-defined password. The vulnerability has a CVSS score of 6.8, indicating high severity.