Cleartext Password Storage in MV iDigital Clinic Enterprise by MV

CVE-2022-31405

What is CVE-2022-31405?

The MV iDigital Clinic Enterprise (iDCE) version 1.0 is affected by a security vulnerability where user passwords are stored in cleartext format. This practice puts sensitive user information at risk, allowing potential attackers to easily access, read, and exploit these passwords to gain unauthorized access to accounts and sensitive data. Organizations using this software are advised to implement immediate remedies to enhance password security and protect their user base.

References