VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 26, 2018· Updated Jun 17, 2026

CVE-2018-18656

CVE-2018-18656

Description

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.

Affected products

2
  • PureVPN/PureVPN2 versions
    cpe:2.3:a:purevpn:purevpn:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:purevpn:purevpn:*:*:*:*:*:windows:*:*range: <6.1.0
    • (no CPE)range: <6.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.