Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Lawson_financials | Lawson_software | 8.0 (including) | 8.0 (including) |