Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloudcnm_secumanager | Zyxel | 3.1.0 (including) | 3.1.0 (including) |
| Cloudcnm_secumanager | Zyxel | 3.1.1 (including) | 3.1.1 (including) |