Vulnerability
vulnerability:clear_text_credential_storage
The insecure storage of usernames and passwords in an unencrypted configuration file, as described for Ultima Online.
The insecure storage of usernames and passwords in an unencrypted configuration file, as described for Ultima Online.
“saves your username and password in a clear text file”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Ultima Online | Explicit | 20 |
| incoming | EXPLOITS | Mobman | Explicit | 20 |
clear-text credential storage AFFECTS Ultima Online
Ultima Online's saved-login feature stored usernames and passwords in a clear-text file.
Explicit Confidence 98% · Jack Rhysider EP 20 Details
“it actually saves your username and password in a clear text file called uo.cfg”
Mobman EXPLOITS clear-text credential storage
Mobman obtained players' uo.cfg files to log into their Ultima Online accounts.
Explicit Confidence 99% · Mobman EP 20 Details
“if we get other people’s uo.config file, ‘cause there’s some idiots at school that play it, we could log in as them”