Executive Summary

This vulnerability involves the insertion of sensitive information, specifically plaintext credentials, into log files by the ARP Agent component in AxxonSoft Axxon One / AxxonNet 2.0.4 and earlier on Windows. A local attacker can read TRACE log files that contain serialized JSON data including passwords, thereby obtaining these credentials.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows a local attacker to access plaintext passwords by reading log files, which can lead to unauthorized access to systems or accounts. This compromises the confidentiality of credentials and may facilitate further attacks or data breaches.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability can negatively impact compliance with standards such as GDPR and HIPAA because it involves exposure of sensitive personal or authentication data. Storing plaintext credentials in logs increases the risk of unauthorized data disclosure, which may violate data protection and privacy requirements.

Useful 0 Not Useful 0