CVE-2021-25898

Name of the Vulnerable Software and Affected Versions Void Aural Rec Monitor version 9.0.0.1

Description An issue was discovered in the svc-login.php file. Passwords are stored in unencrypted source-code text files, which is noted when accessing the svc-login.php file. The value is used to authenticate a high-privileged user upon authenticating with the server.

Recommendations For Void Aural Rec Monitor version 9.0.0.1, consider encrypting passwords stored in source-code text files to prevent unauthorized access. As a temporary workaround, restrict access to the svc-login.php file to minimize the risk of exploitation.