8 lines
No EOL
381 B
Text
Executable file
8 lines
No EOL
381 B
Text
Executable file
source: http://www.securityfocus.com/bid/13559/info
|
|
|
|
It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files.
|
|
|
|
As a result, user credentials could be exposed to other local users who have permissions to access the log files.
|
|
|
|
C:\HSphere.NET\log\action.log
|
|
C:\HSphere.NET\log\resources.log |