CVE-2021-34689

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 7.6.48

Description: The issue allows information disclosure. A locally authenticated attacker can read the system's Personal Key in world-readable %PROGRAMDATA% log files.

Recommendations: For versions prior to 7.6.48, update to version 7.6.48 or later to resolve the issue. As a temporary workaround, consider restricting access to the %PROGRAMDATA% log files to minimize the risk of exploitation.