exploit-db-mirror/exploits/windows/local/25636.txt
Offensive Security b4c96a5864 DB: 2021-09-03
28807 changes to exploits/shellcodes
2021-09-03 20:19:21 +00:00

8 lines
No EOL
373 B
Text

source: https://www.securityfocus.com/bid/13559/info
It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files.
As a result, user credentials could be exposed to other local users who have permissions to access the log files.
C:\HSphere.NET\log\action.log
C:\HSphere.NET\log\resources.log