Product:
PC Manager
Summary
Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally. This vulnerability poses a risk to the confidentiality of sensitive data. Attackers can exploit this weakness without requiring any special privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2025-49728 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By accessing the cleartext stored sensitive information, the attacker can bypass security features and potentially gain unauthorized access to sensitive data. This can be done without any user interaction or special privileges.
Affected Products
- Microsoft PC Manager: A tool designed to optimize and manage PC performance, which is affected by the cleartext storage vulnerability.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft PC Manager and apply any available security updates. Additionally, it is recommended to limit local access to systems where sensitive information is stored.