SicommNet BASEC Insecure Password Storage Vulnerability

A vulnerability allowing insufficiently protected credentials has been identified in SicommNet BASEC on SaaS. This issue arises from passwords being stored in plain text or using reversible encryption, which enables an attacker with sufficient privileges to easily extract the original passwords. The vulnerability affects SicommNet BASEC versions released from December 14, 2021, onwards.

Impact

Exploitation of this vulnerability could lead to unauthorized password recovery, allowing attackers to gain access to user accounts.