The Spectrum Cash Receipting System stores passwords in a local file for offline access. Passwords stored in this file are encrypted using a weak algorithm. Passwords for all users of the system are also stored in this file, allowing enumeration of user accounts. This issue was reported to affect Spectrum Cash Receipting System 6.406.08, however, other versions are likely affected.
The Spectrum Cash Receipting System stores passwords in a local file for offline access. Passwords stored in this file are encrypted using a weak algorithm. Passwords for all users of the system are also stored in this file, allowing enumeration of user accounts. This issue was reported to affect Spectrum Cash Receipting System 6.406.08, however, other versions are likely affected.