Vulnerability in Pocket Pc

CVE-2006-4614

PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which allows local users to obtain sensitive information via keys under \HKEY_CURRENT_USER\Software\PDAapps\VeriChat.

EPSS: 0.003 (25.1th percentile) — read the EPSS interpretation.

Affected products

Pocket_pc — versions 1.30bh
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)