Vulnerabilities > CVE-2006-4614 - Information Disclosure vulnerability in Pocket PC Pocket PC 1.30Bh

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
local
low complexity
pocket-pc

Summary

PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which allows local users to obtain sensitive information via keys under \HKEY_CURRENT_USER\Software\PDAapps\VeriChat.

Vulnerable Configurations

Part Description Count
Application
Pocket_Pc
1