Streamsoft Prestiż Password Decoding Vulnerability

A vulnerability exists in Streamsoft Prestiż software prior to version 18.2.377, allowing for the decoding of passwords stored in the application's database. This issue arises from the use of a custom password encoding algorithm, which can be easily reversed or brute-forced once the encoding method is understood. The algorithm can be deduced by observing the transformation of passwords during the encoding process.

Impact

Exploitation of this vulnerability allows for the unauthorized decoding of user passwords, potentially leading to unauthorized access to user accounts.

Remediation

Users can upgrade to Streamsoft Prestiż version 18.2.377 or later to address this vulnerability.