CVE Catalog
CVE-2017-9615
CriticalSummary
Cognito Software Moneyworks versions 8.0.3 and earlier have a password exposure issue. Verbose logging writes the administrator password to a world-readable file.
Risk Assessment
Attackers can gain administrator access to all data, posing a serious security risk to the organization.
Recommendation
It is recommended to update the software to the latest version and restrict access to log files.
Original NVD description (English source)
Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file.