In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.