PT-2018-2788

Published

2018-08-31

·

Updated

2018-08-31

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Galaktika ERP (affected versions not specified)
Description The issue is related to the storage of administrator user credentials in plain text, which can be used to configure the software. An attacker with local access can exploit this to reveal privileged user credentials by analyzing the contents of the HKLM registry branch (HKEY LOCAL MACHINESOFTWAREGalaktika Corp), which is accessible to all users.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾