CVE-2021-27187 PoC — Sovremennye Delovye Tekhnologii FX Aggregator 安全漏洞

Source

https://github.com/jet-pentest/CVE-2021-27187

Associated Vulnerability

Title:Sovremennye Delovye Tekhnologii FX Aggregator 安全漏洞 (CVE-2021-27187)
Description:The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked.

Readme

# CVE-2021-27187

## [Suggested description]
The FX Aggregator terminal client by "Sovremennye Delovye Tekhnologii" stores authentication credentials in cleartext in login.sav when the Save Password box is checked.

## [VulnerabilityType Other]
CWE-522 Insufficiently Protected Credentials

## [Vendor of Product]
OOO Sovremennye Delovye Tekhnologii

## [Affected Product Code Base]
Fx-agreggator terminal client - 1

## [Affected Component]
affected file "login.sav"

## [Impact Information Disclosure]
true

## [Has vendor confirmed or acknowledged the vulnerability?] 
true

## [Discoverer]
Maria Kononova (Jet Infosystems, jet.su)

## [Reference]
https://sdt-fx.ru/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →