An authorized user can view clear‑text secrets for certain credential types and fields. This results in loss of confidentiality, allowing attackers with legitimate access to retrieve sensitive authentication data. The weakness is identified as CWE‑522, Insufficiently Protected Credentials, and is rated as a medium severity vulnerability.

The runZero Platform is affected. Users running any version of the Platform prior to 4.0.260204.2 are vulnerable.

The CVSS score of 5.3 indicates moderate risk. Because susceptibility requires legitimate authorization, the attack vector is internal and limited to users with existing access. No exploit probability data or KEV listing is available, and no publicly disclosed exploit has been reported.