CVE-2018-18656

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:purevpn:purevpn:*:*:*:*:*:windows:*:*

History

No history.

Information

Published : 2018-10-26 12:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-18656

Mitre link : CVE-2018-18656

CVE.ORG link : CVE-2018-18656


JSON object : View

Products Affected

purevpn

  • purevpn
CWE
CWE-522

Insufficiently Protected Credentials