An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dcap | Makves | 3.0.0.122 (including) | 3.0.0.122 (including) |
| Dcap | Makves | 3.0.0.183 (including) | 3.0.0.183 (including) |