CVE-2017-9615: Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator a...

Security readout for executives and security teams

Moneyworks 8.0.3 and earlier can expose the administrator password by writing it into a verbose log file that is world-readable. Anyone who can read that file may be able to obtain administrator access to all Moneyworks data. The public record does not provide CVSS, CWE, or a confirmed fix. Exposure is likely limited to organizations running Cognito Software Moneyworks 8.0.3 or earlier, especially systems where verbose logging is enabled and local users, support accounts, or processes can read the generated log file. Treat this as high priority where Moneyworks stores sensitive accounting or business records. The issue can expose administrator credentials and therefore all application data, but urgency depends on whether affected versions and readable verbose logs exist in your environment. Mitigation focus: Check Cognito vendor guidance for a fixed version or supported remediation.; Upgrade Moneyworks if the vendor identifies a version that removes the logging exposure.; Disable verbose logging unless it is explicitly required for support..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.