Cryptosim
Monthly
Cleartext storage of sensitive information in Cryptosim exposes confidential data to authenticated adjacent-network attackers across all versions before 3.1.0.229. Discovered and reported by TR-CERT (Turkish national cybersecurity authority), the flaw (CWE-312) allows any low-privileged user with adjacent network access to retrieve embedded sensitive data that the application should protect through encryption. No active exploitation is confirmed at time of analysis, and no public proof-of-concept code has been identified.
Cleartext storage of sensitive information in Cryptosim exposes confidential data to authenticated adjacent-network attackers across all versions before 3.1.0.229. Discovered and reported by TR-CERT (Turkish national cybersecurity authority), the flaw (CWE-312) allows any low-privileged user with adjacent network access to retrieve embedded sensitive data that the application should protect through encryption. No active exploitation is confirmed at time of analysis, and no public proof-of-concept code has been identified.