CVE-2023-3395

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-256 CWE-312

Affected software

No affected versions have been published.

Timeline

Published: Jul 3, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-339507.5Pattern Redirects in Liferay Portal 7.4.3.48 through 7.4.3.76, and Liferay DXP 7.4 update 48 through 76 allows regular expressions that are CVE-2023-339515.3A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The i CVE-2023-339526.7A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due CVE-2023-339537.5gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in ex CVE-2023-339555.3Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This CVE-2023-339566.5Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insec CVE-2023-339575.7notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high nu CVE-2023-339586.5notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high nu CVE-2023-339598.8notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to CVE-2023-33966.5A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is CVE-2023-339607.5OpenProject is web-based project management software. For any OpenProject installation, a `robots.txt` file is generated through the server CVE-2023-339615.4Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with commenting privileges can i