CVE-2023-2335

Plaintext Password in Registry

State: Published
Severity: 6.5 Medium
Published: Apr 27, 2023
Updated: Jan 30, 2025
Reserved: Apr 27, 2023

Read the record on cve.org

Description

Plaintext Password in Registry

vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Registery modules) allows Retrieve

Admin user credentials

This issue affects surelock windows: from 2.3.12 through 2.40.0.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	42Gears

Weaknesses

CWE-314 Cleartext Storage in the Registry
CWE-312 Cleartext Storage of Sensitive Information

Affected Products

Product	Versions
surelock windows42gears	2.3.12 through 2.40.0Affected

References

https://www.42gears.com/security-and-compliance/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.