Kaseya Rapid Fire Tools Network Detective Unencrypted Credentials Vulnerability

A vulnerability exists in Kaseya Rapid Fire Tools Network Detective version 2.0.16.0, where unencrypted credentials for privileged access are stored in the collector.txt configuration file. This issue allows for easy retrieval of sensitive information, including administrative passwords, by anyone with access to the machine running the application.

Impact

The vulnerability allows for the exposure of cleartext administrative credentials, which can lead to unauthorized access and manipulation of client infrastructure, particularly in environments using VMware.

Remediation

Users are advised to update to the latest version of Kaseya Rapid Fire Tools Network Detective, verify that no files remain in the temporary directory where cleartext passwords were stored, and rotate all previously used credentials.