The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote malicious users to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
visionsoft audit 12.4.0.0 |
Vulmon