Sipera VIPER Lab has discovered a weakness in Globe7, which can be exploited by malicious, local users to disclose sensitive information.

The weakness is caused due to Globe7 incorrectly storing user credentials locally using a weak encryption algorithm. This can be exploited to gain access to the stored Globe7 account.

Successful exploitation requires access to the local password file.

The weakness is confirmed in version 7.3. Other versions may also be affected.

Solution
Do not store your user id and password.

Provided and/or discovered by
Sipera VIPER Lab

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.sipera.com/index.php?action=resources,threat_advisory&tid=364

Deep Links
Links available to Secunia VIM customers