CVE-2016-2308

High

Published: 05/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

American Auto-Matrix Aspect-Nexus and Aspect-Matrix applications before version 3.0.0 store passwords in cleartext, allowing remote attackers to obtain sensitive information by reading a file.

Risk Assessment

Storing passwords in plaintext poses a serious risk of data leakage, potentially leading to unauthorized access to organizational systems.

Recommendation

It is recommended to upgrade the application to version 3.0.0 or later and implement password encryption mechanisms.

Other vulnerabilities in American Auto-Matrix Aspect-Nexus, Aspect-Matrix Building Automation Front-End Solutions

CVE-2016-2307High
American Auto-Matrix Aspect-Nexus and Aspect-Matrix applications before version 3.0.0 allow remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file.

Original NVD description (English source)

American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application store passwords in cleartext, which allows remote attackers to obtain sensitive information by reading a file.