Security Advisory
CVE-2009-2358
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file.