VULHUB ™

CentraOne is a commercially available education software package. It is maintained and distributed by Centra. The CenturaOne software stores the user and password credentials in the CentraOne log file, and does not set secure permissions on the log file. In addition to insecure log file permissions, the data is stored using an insecure encoding method. It should be noted that this only affects systems which connect to the Centra Server through a proxy server which has Basic Authentication enabled.

CentraOne is a commercially available education software package. It is maintained and distributed by Centra. The CenturaOne software stores the user and password credentials in the CentraOne log file, and does not set secure permissions on the log file. In addition to insecure log file permissions, the data is stored using an insecure encoding method. It should be noted that this only affects systems which connect to the Centra Server through a proxy server which has Basic Authentication enabled.