Maria Kononova

Name of the Vulnerable Software and Affected Versions: Sovremennye Delovye Tekhnologii FX Aggregator terminal client version 1 Description: The issue concerns the storage of authentication credentials in cleartext in the login.sav file when the Save Password box is checked. This affects the security of user authentication data. Recommendations: For Sovremennye Delovye Tekhnologii FX Aggregator terminal client version 1, consider disabling the Save Password feature to prevent credentials from being stored in cleartext until a proper fix is implemented. Additionally, users should be cautious with their authentication credentials and avoid using the same credentials across multiple services. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Sovremennye Delovye Tekhnologii FX Aggregator terminal client version 1 Description: The issue allows attackers to cause a denial of service by making five invalid login attempts to a victim's account, resulting in access being suspended for five hours. This can be achieved by exploiting the login mechanism, specifically by attempting to log in with incorrect credentials multiple times. Recommendations: For Sovremennye Delovye Tekhnologii FX Aggregator terminal client version 1, consider implementing a temporary workaround such as limiting the number of consecutive invalid login attempts or introducing a cooldown period between attempts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Pryaniki version 6.44.3 Description: A cross-site scripting (XSS) issue allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment. Recommendations: For Pryaniki version 6.44.3, consider disabling the file upload feature until a patch is available to prevent exploitation of the XSS vulnerability. Restrict access to attachments to minimize the risk of JavaScript code execution. Avoid using the affected version for uploading or accessing files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.