Test ID:	1.3.6.1.4.1.25623.1.0.814111
Category:	General
Title:	TeamViewer Password Storage 'teamviewer.exe' Information Disclosure Vulnerability - Windows
Summary:	TeamViewer is prone to an information disclosure; vulnerability.
Description:	Summary: TeamViewer is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to TeamViewer stores a password in Unicode format within TeamViewer.exe process memory between '[00 88]' and '[00 00 00]' delimiters, which allows attackers to obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running. Vulnerability Impact: Successful exploitation would allow attackers to obtain sensitive information Affected Software/OS: TeamViewer versions through 13.1.1548. Solution: As a workaround disable the underlying feature by unchecking the checkbox Temporarily save connection passwords via the path Extras -> Options -> Advanced -> Advanced settings for connections to other computers. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-14333 https://github.com/vah13/extractTVpasswords
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.