Itech-gmbh Ilabclient: Local credential exposure (CVE-2024-56428)
Itech-gmbh Ilabclient version 3.7.1 stores credentials in cleartext within an Apache Derby database, allowing local attackers to extract configuration data via the ij tool.
CVE search metadata
CVE search record: CVE-2024-56428. Severity: medium. CVSS: 5.5. EPSS: 0.16%. KEV: no. Product: Ilabclient (3.7.1). Brief: Itech-gmbh Ilabclient: Local credential exposure (CVE-2024-56428). Brief link: https://feed.craftedsignal.io/briefs/2026-10-itech-gmbh-ilabclient-credential-exposure/
CVE search record: CVE-2024-56429. Severity: high. CVSS: 7.7. EPSS: 0.16%. KEV: no. Product: Ilabclient (3.7.1). Brief: Itech-gmbh Ilabclient: Local credential exposure (CVE-2024-56428). Brief link: https://feed.craftedsignal.io/briefs/2026-10-itech-gmbh-ilabclient-credential-exposure/
Triage facts
Revision 1- Applicability
- Ilabclient (3.7.1)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 2 public sources
- Freshness
- Revision 1Oct 29, 03:50 UTC
- Vulnerabilities
- 2 CVEs
- Source quality
- C3Roughly even chance
Itech-gmbh Ilabclient version 3.7.1 stores configuration data in an Apache Derby local database. Security research identifies that credentials within this database are stored in cleartext. An attacker with local access to the affected system can query the database using the Apache Derby 'ij' utility to retrieve stored credentials. This vulnerability is documented alongside CVE-2024-56429.
Impact
Successful exploitation allows a local attacker to recover cleartext passwords from the ilabClient configuration database, potentially leading to unauthorized access to associated laboratory systems.
Recommendation
- Audit systems running Ilabclient 3.7.1 for access to the directory 'C:\ilabClient' and its subdirectories.
- Monitor for the execution of the Apache Derby 'ij' tool within the context of the ilabClient installation directory.
- Restrict local file system permissions on the database files managed by the ilabClient to only the service account required for application operation.
Immediate actions
Identify all hosts running Itech-gmbh Ilabclient 3.7.1 and restrict local user access to the application directory.
Threat Hunt
Identify execution of the Apache Derby ij tool within the ilabClient path.
Data: Process creation logs (Event ID 1)
Mitigations
Upgrade to a patched version of Ilabclient once provided by Itech-gmbh.
CVE-2024-56428