Mesalvo Meona Client and Server Components Privilege Assignment Vulnerability Allowing User Data Export

A vulnerability in the Mesalvo Meona Client Launcher and Server Components allows for incorrect privilege assignment, enabling the export of user data, including cleartext passwords, through the SQL editor. This issue affects the Meona Client Launcher Component versions prior to 19.06.2020 15:11:49 and the Meona Server Component versions prior to 2025.04 5+323020.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user data, including cleartext passwords, which could be used for further attacks such as password spraying.