CVE Catalog
CVE-1999-1470
MediumExploitation Probability (EPSS)
Low risk0.33%
24th percentile - higher than 24% of all known CVEs
Summary
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.
Risk Assessment
Storing passwords in cleartext poses a risk of unauthorized access to the system by local users.
Recommendation
It is recommended to implement password encryption mechanisms and restrict access to the registry keys.
Original NVD description (English source)
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges.