Nintex Automation Password Exposure Vulnerability in K2 SmartForms Designer
Vulnerability
A vulnerability exists in Nintex Automation versions 5.6 and 5.7 prior to 5.8, where the K2 SmartForms Designer folder contains web.config files with passwords that can be accessed by unauthorized users.
Impact
Exposed passwords in configuration files, potentially leading to unauthorized access or actions.
Remediation
Users can upgrade to Nintex Automation version 5.8 or later to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.