Gina Wong-Moe

Database scanning using a `username` and `password` stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk, leading to exposure of sensitive information for unauthorized access, potentially resulting in severe consequences such as data breaches, unauthorized data manipulation, and compromised system integrity.

The issue allows an authenticated attacker to inject malicious scripts into the application through a cross-site scripting attack.

The issue allows passwords for the Admin and Config UI to be brute-forced. It is recommended that users should be locked out after multiple invalid attempts to prevent such attacks.