NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Express_accounts | Nchsoftware | * | 8.24 (including) |