CVE Catalog
CVE-1999-1354
MediumExploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
The email client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files home.fc, network.fc, or FCCLIENT.LOG.
Risk Assessment
Storing credentials in cleartext poses a significant risk of information leakage and unauthorized access to user accounts.
Recommendation
It is recommended to upgrade to a newer version of the software and implement mechanisms for encrypting credentials.
Original NVD description (English source)
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled.