BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.Referenceshttp://marc.info/?l=ntbugtraq&m=91487886514546&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/1565