{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ilabclient-3.7.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:itech-gmbh:ilabclient:3.7.1:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":5.5,"id":"CVE-2024-56428"},{"cvss":7.7,"id":"CVE-2024-56429"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Ilabclient (3.7.1)"],"_cs_severities":["high"],"_cs_tags":["credential-access","local-access","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Itech-gmbh"],"content_html":"\u003cp\u003eItech-gmbh Ilabclient version 3.7.1 stores configuration data in an Apache Derby local database. Security research identifies that credentials within this database are stored in cleartext. An attacker with local access to the affected system can query the database using the Apache Derby 'ij' utility to retrieve stored credentials. This vulnerability is documented alongside CVE-2024-56429.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a local attacker to recover cleartext passwords from the ilabClient configuration database, potentially leading to unauthorized access to associated laboratory systems.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit systems running Ilabclient 3.7.1 for access to the directory 'C:\\ilabClient' and its subdirectories.\u003c/li\u003e\n\u003cli\u003eMonitor for the execution of the Apache Derby 'ij' tool within the context of the ilabClient installation directory.\u003c/li\u003e\n\u003cli\u003eRestrict local file system permissions on the database files managed by the ilabClient to only the service account required for application operation.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T03:50:14Z","date_published":"2026-10-29T03:50:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-itech-gmbh-ilabclient-credential-exposure/","summary":"Itech-gmbh Ilabclient version 3.7.1 stores credentials in cleartext within an Apache Derby database, allowing local attackers to extract configuration data via the ij tool.","title":"Itech-gmbh Ilabclient: Local credential exposure (CVE-2024-56428)","url":"https://feed.craftedsignal.io/briefs/2026-10-itech-gmbh-ilabclient-credential-exposure/"}],"language":"en","title":"CraftedSignal Threat Feed - Ilabclient (3.7.1)","version":"https://jsonfeed.org/version/1.1"}