CVE-2021-37468

LOW

NCH Reflect CRM < 3.01 - Cleartext Storage of Sensitive Information in Configuration Files

Title source: llm

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

Product x_refsource_misc

CVSS v3 3.3

EPSS 0.0025

EPSS Percentile 15.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-312

Status published

Products (1)

nch/reflect_customer_relationship_management < 3.01

Published Jul 25, 2021

Tracked Since Feb 18, 2026