OSVDB ID: 13701 Title: SafeNet SoftRemote VPN Client IreIKE.exe Cleartext Password Local Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
SafeNet SoftRemote VPN Client contains a flaw that may lead to an unauthorized information disclosure. The issue is due to the IreIKE.exe process decrypting VPN (pre-shared keys) passwords upon startup and storing them as plaintext in memory. This allows for disclosure of the local users' VPN password information resulting in a loss of confidentiality. |
Classification |
Location:
Local Access Required
Attack Type: Cryptographic, Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to version 10.3.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|