CVE:CVE-2018-13014
CNNVD:CNNVD-201807-021
SAFE'N'SEC SoftControl/SafenSoft SysWatch、SoftControl/SafenSoft TPSecure和SoftControl/SafenSoft Enterprise Suite都是俄罗斯SAFE'N'SEC公司的能够主动防御恶意软件的应用程序。
SAFE'N'SEC SoftControl/SafenSoft SysWatch、SoftControl/SafenSoft TPSecure和SoftControl/SafenSoft Enterprise Suite 4.4.2之前版本中的safensec.com (SysWatch service)存在安全漏洞，该漏洞源于程序将密码存储为可恢复的格式。本地攻击者可利用该漏洞获取SysWatch密码并修改程序设置。
solution:Upgrade safensoft enterprise_suite to a higher version than 4.4.2,and avoid the version (,4.4.2); Upgrade safensoft syswatch to a higher version than 4.4.2,and avoid the version (,4.4.2); Upgrade safensoft tpsecure to a higher version than 4.4.2,and avoid the version (,4.4.2)