CVE-2021-27187

HIGH

Xn--b1agzlht FX Aggregator Terminal C... - Insufficiently Protected Credentials

Title source: rule

Description

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked.

Exploits (1)

nomisec WRITEUP 1 stars

by jet-pentest · poc

https://github.com/jet-pentest/CVE-2021-27187

View Code ZIP pw:eip

References (2)

[Third Party Advisory] https://github.com/jet-pentest/CVE-2021-27187

[Third Party Advisory] https://www.dnb.com/business-directory/company-profiles.pryaniki_ooo.13b676c626e38d534ff1a6a2a9fc7e6a.html

Scores

CVSS v3 7.5

EPSS 0.0057

EPSS Percentile 68.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-522

Status published

Affected Products (1)

xn--b1agzlht/fx_aggregator_terminal_client

Timeline

Published Feb 12, 2021

Tracked Since Feb 18, 2026