Matthew Gregory

**Name of the Vulnerable Software and Affected Versions** Automated Logic WebCTRL versions 6.0 through 9.0 Carrier i-Vu versions 6.0 through 9.0 **Description** A weakness exists in the web session management component that allows access to stored passwords in a recoverable format. This can lead to password reuse attacks by malicious users. **Recommendations** Automated Logic WebCTRL versions 6.0 through 9.0 should be updated. Carrier i-Vu versions 6.0 through 9.0 should be updated.