CVE-2018-13014

Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
VendorProductVersion
safensoftenterprise_suite
𝑥
< 4.4.2
safensoftsyswatch
𝑥
< 4.4.2
safensofttpsecure
𝑥
< 4.4.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2
http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2