SLikeSoft / SLikeNet

SLikeNetâ„¢ is an Open Source/Free Software cross-platform network engine written in C++ and specifially designed for games (and applications which have comparable requirements on a network engine like games) building upon the discontinued RakNet network engine which had more than 13 years of active development.
https://www.slikenet.com/
Other
390 stars 62 forks source link

INSECURE: Lobby2 extension stores passwords in cleartext #59

Open jompu opened 4 years ago

jompu commented 4 years ago

You should fix the lobby2 extension or deprecate it as insecure.

It stores the passwords in cleartext and sends a lost password in cleartext to users email.

You can verify this by just looking into DependentExtensions/Lobby2/PGSQL/Lobby2Message_PGSQL.cpp file and search for a password string.