Description
Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.
Problem types
CWE-922 Insecure Storage of Sensitive Information
CWE-522 Insufficiently Protected Credentials
CWE-257 Storing Passwords in a Recoverable Format
Product status
*
2024.3
Credits
Shadron Gudmunson,Luke Rindels,Robert McCain,Asjha Stus,Adam Merrill,Ryan Kao,Brian Healy, Sandia National Laboratories Adversarial Modeling and Penetration Testing (AMPT)
References
raw.githubusercontent.com/...IT/white/2025/va-25-282-01.json (url)
www.cve.org/CVERecord?id=CVE-2025-35054 (url)
