cvedb.io
CVE-2018-18656
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2018-10-26T12:29:00.213 · Last modified 2026-06-17T01:47:39.167

Summary

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.

Affected products

purevpn — purevpn

Does this affect you?

Add your gear to cvedb and we'll alert you only when purevpn ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.