PT-2022-12454 · Softwarebuero Zauner · Softwarebuero Zauner Arc

Sebastian Hamann · Published 2022-04-05 · Updated 2022-04-14 · CVE-2021-45892

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Softwarebuero Zauner ARC version 4.2.0.4

Description An issue was discovered where passwords are stored in a recoverable format.

Recommendations For Softwarebuero Zauner ARC version 4.2.0.4, consider updating the password storage mechanism to an unrecoverable format, such as hashing and salting, to prevent unauthorized access to passwords. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2021-45892

Affected Products

Softwarebuero Zauner Arc

References · 4

• https://osv.dev/vulnerability/CVE-2021-45892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45892 · Security Note
• https://syss.de · Note
• https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-064.txt · Note