CVE-2017-9615

CVE-2017-9615 describes a critical password exposure vulnerability in Cognito Software Moneyworks versions 8.0.3 and earlier. This flaw allows an unauthenticated attacker to gain full administrative access to all data due to verbose logging writing the administrator password to a world-readable file. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.