CoreCVE
Back

MEDIUM

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation

Published Apr 18, 2019

Description

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-311

Missing Encryption of Sensitive Data

CWE-345

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 18, 2019
Updated Aug 5, 2024
Reserved Sep 20, 2018
Link CVE-2018-17287
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-17287
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-17287