CVE-2018-18656

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext

published October 26, 2018

CVSS
—
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00357 · 27.9th percentile
Published
2018-10-26T12:00Z
EPSS history
Timeline
  • 26 OCT 12:00Z
    The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext
    cvelistv5