CVE-2018-13014

EUVD-2018-4964
Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
safensoftenterprise_suite
𝑥
< 4.4.2
safensoftsyswatch
𝑥
< 4.4.2
safensofttpsecure
𝑥
< 4.4.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2
http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2