Mike Iacovacci has reported a security issue in Credant Mobile Guardian Shield for Windows (CMG Shield), which can be exploited by malicious, local users to gain knowledge of sensitive information.

The problem is that CMG Shield stores sensitive information in memory as plaintext. This can be exploited to disclose e.g. the Windows Domain username and password.

The security issue is reported in version 5.2.1.105. Other versions may also be affected.

Solution
Update to version 5.2.1.125 (contact the vendor for details).

Provided and/or discovered by
Mike Iacovacci

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area