Vatos Dlp
Monthly
Vatos DLP 1.1.176 through 1.1.242 stores domain credentials in plaintext, so an authenticated local low-privileged user who can read the product's stored configuration can recover reusable domain logins. Successful exploitation yields high confidentiality and integrity impact with no availability impact (CVSS 7.1, CWE-256); there is no remote or unauthenticated path in the assessed vector. No public exploit was identified at time of analysis, no active-exploitation signal is present in the provided intelligence, and the vendor fixed the issue in Vatos DLP 1.1.243.
Vatos DLP 1.1.176 through 1.1.242 stores domain credentials in plaintext, so an authenticated local low-privileged user who can read the product's stored configuration can recover reusable domain logins. Successful exploitation yields high confidentiality and integrity impact with no availability impact (CVSS 7.1, CWE-256); there is no remote or unauthenticated path in the assessed vector. No public exploit was identified at time of analysis, no active-exploitation signal is present in the provided intelligence, and the vendor fixed the issue in Vatos DLP 1.1.243.