Clear Text Storage of Password in Crypttech's Vatos DLP

Summary

Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials. This issue affects Vatos DLP: from 1.1.176 before 1.1.243.

Remediation

1. Inventory every Crypttech Crypto and Informatics Technologies Industry and… Vatos DLP deployment, including staging.
2. Upgrade Crypttech Crypto and Informatics Technologies Industry and… Vatos DLP to 1.1.243.
3. Confirm the running version after the upgrade.

References

• Referencehttps://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1432