Newforma Info Exchange Insufficiently Protected Credentials Vulnerability

A vulnerability exists in Newforma Info Exchange (NIX) versions through 2024.3, where credentials for configuring NPCS are stored in the Windows Registry under 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. While the credentials are encrypted, the encryption key is also stored in the same registry location, allowing authenticated users to access both the encrypted credentials and the key. If the credentials are for Active Directory, an attacker could potentially access additional systems and resources.

Impact

This vulnerability allows for the unauthorized access of sensitive credentials, which could lead to further exploitation of systems and resources, especially if Active Directory credentials are involved.