
Proof-of-concept for CVE-2021-27187: cleartext credential storage in FX Aggregator terminal client login.sav file, enabling local credential theft and unauthorized access.
The FX Aggregator terminal client by "Sovremennye Delovye Tekhnologii" stores authentication credentials in cleartext in login.sav when the Save Password box is checked.
CWE-522 Insufficiently Protected Credentials
OOO Sovremennye Delovye Tekhnologii
Fx-agreggator terminal client - 1
affected file "login.sav"
true
true
Maria Kononova (Jet Infosystems, jet.su)