CVE-2021-35050

Name of the Vulnerable Software and Affected Versions: Fidelis Network and Deception versions prior to 9.3.3

Description: The issue concerns user credentials being stored in a recoverable format within the system. If an attacker gains access to the CommandPost, they could decode and use these credentials to login to the application.

Recommendations: For versions prior to 9.3.3, update to version 9.3.3 or a subsequent version to resolve the issue. As a temporary workaround, consider restricting access to the CommandPost to minimize the risk of exploitation.