Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml), which allows attackers to steal passwords by obtaining the file.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Krusader | Krusader | 1.70.0 | 1.70.0 |
Krusader | Krusader | 1.70.0_beta1 | 1.70.0_beta1 |
Krusader | Krusader | 1.60.0 | 1.60.0 |
Krusader | Krusader | 1.50_beta1 | 1.50_beta1 |