Security Advisory
CVE-2008-7207
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.