Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) authentication.dat or (2) XML files in the Exports directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Server_monitor | Tembria | * | 6.0.4 (including) |
| Server_monitor | Tembria | 4.0.6 (including) | 4.0.6 (including) |
| Server_monitor | Tembria | 4.0.7 (including) | 4.0.7 (including) |
| Server_monitor | Tembria | 4.1.0 (including) | 4.1.0 (including) |
| Server_monitor | Tembria | 4.1.1 (including) | 4.1.1 (including) |
| Server_monitor | Tembria | 4.1.2 (including) | 4.1.2 (including) |
| Server_monitor | Tembria | 4.1.3 (including) | 4.1.3 (including) |
| Server_monitor | Tembria | 4.2 (including) | 4.2 (including) |
| Server_monitor | Tembria | 4.2.1 (including) | 4.2.1 (including) |
| Server_monitor | Tembria | 4.3 (including) | 4.3 (including) |
| Server_monitor | Tembria | 4.3.1 (including) | 4.3.1 (including) |
| Server_monitor | Tembria | 4.3.2 (including) | 4.3.2 (including) |
| Server_monitor | Tembria | 4.3.3 (including) | 4.3.3 (including) |
| Server_monitor | Tembria | 5.0-beta1 (including) | 5.0-beta1 (including) |
| Server_monitor | Tembria | 5.0-beta2 (including) | 5.0-beta2 (including) |
| Server_monitor | Tembria | 5.0-beta3 (including) | 5.0-beta3 (including) |
| Server_monitor | Tembria | 5.0.0 (including) | 5.0.0 (including) |
| Server_monitor | Tembria | 5.0.1 (including) | 5.0.1 (including) |
| Server_monitor | Tembria | 5.0.2 (including) | 5.0.2 (including) |
| Server_monitor | Tembria | 5.0.3 (including) | 5.0.3 (including) |
| Server_monitor | Tembria | 5.0.4 (including) | 5.0.4 (including) |
| Server_monitor | Tembria | 5.0.5 (including) | 5.0.5 (including) |
| Server_monitor | Tembria | 5.1.0 (including) | 5.1.0 (including) |
| Server_monitor | Tembria | 5.1.1 (including) | 5.1.1 (including) |
| Server_monitor | Tembria | 5.1.2 (including) | 5.1.2 (including) |
| Server_monitor | Tembria | 5.1.3 (including) | 5.1.3 (including) |
| Server_monitor | Tembria | 5.2.0 (including) | 5.2.0 (including) |
| Server_monitor | Tembria | 5.2.1 (including) | 5.2.1 (including) |
| Server_monitor | Tembria | 5.2.2 (including) | 5.2.2 (including) |
| Server_monitor | Tembria | 5.2.3 (including) | 5.2.3 (including) |
| Server_monitor | Tembria | 5.2.4 (including) | 5.2.4 (including) |
| Server_monitor | Tembria | 5.2.5 (including) | 5.2.5 (including) |
| Server_monitor | Tembria | 5.3.0 (including) | 5.3.0 (including) |
| Server_monitor | Tembria | 5.3.1 (including) | 5.3.1 (including) |
| Server_monitor | Tembria | 5.3.2 (including) | 5.3.2 (including) |
| Server_monitor | Tembria | 5.3.3 (including) | 5.3.3 (including) |
| Server_monitor | Tembria | 5.3.4 (including) | 5.3.4 (including) |
| Server_monitor | Tembria | 5.3.5 (including) | 5.3.5 (including) |
| Server_monitor | Tembria | 5.3.6 (including) | 5.3.6 (including) |
| Server_monitor | Tembria | 5.5.0 (including) | 5.5.0 (including) |
| Server_monitor | Tembria | 5.5.1 (including) | 5.5.1 (including) |
| Server_monitor | Tembria | 5.5.2 (including) | 5.5.2 (including) |
| Server_monitor | Tembria | 5.5.3 (including) | 5.5.3 (including) |
| Server_monitor | Tembria | 5.6.0 (including) | 5.6.0 (including) |
| Server_monitor | Tembria | 5.6.1 (including) | 5.6.1 (including) |
| Server_monitor | Tembria | 5.6.2 (including) | 5.6.2 (including) |
| Server_monitor | Tembria | 5.6.3 (including) | 5.6.3 (including) |
| Server_monitor | Tembria | 6.0.0 (including) | 6.0.0 (including) |
| Server_monitor | Tembria | 6.0.1 (including) | 6.0.1 (including) |
| Server_monitor | Tembria | 6.0.2 (including) | 6.0.2 (including) |
| Server_monitor | Tembria | 6.0.3 (including) | 6.0.3 (including) |