CVE-1999-1353
MediumExploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Nosque MsgCore 2.14 stores passwords in cleartext, potentially allowing local users to gain privileges. The administrator password is stored in the AdmPasswd registry key, and user passwords in the Userbase.dbf data file.
Risk Assessment
Storing passwords in cleartext poses a serious security risk, allowing local users unauthorized access to accounts with elevated privileges.
Recommendation
It is recommended to immediately change the password storage method by implementing encryption and restricting access to files and registry keys containing sensitive data.
Original NVD description (English source)
Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges.