CWE Code: 311
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  Missing Encryption of Sensitive Data
Summary: a vulnerability has been identified in siclock tc100 (all versions) and siclock tc400 (all versions). unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-07-03
Last Modified Date: 2019-10-09