The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.
References
Link | Resource |
---|---|
https://www.trustwave.com/Resources/SpiderLabs-Blog/Credential-Leak-Flaws-in-Windows-PureVPN-Client/ | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:22:03
Updated: 2022-10-03T16:22:03
Reserved: 2022-10-03T00:00:00
Link: CVE-2018-18656
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-10-26T12:29:00.213
Modified: 2020-08-24T17:37:01.140
Link: CVE-2018-18656
JSON object: View
Redhat Information
No data.
CWE