Storing Passwords in a Recoverable Format

The SEL RTAC database stores passwords in a way that can be recovered and read by someone with access to the system. An attacker who gains database access can extract these passwords to compromise other accounts or systems.

CWE-257 vulnerability in SEL RTAC database: passwords are stored in a recoverable format rather than using cryptographic hashing. An authenticated attacker with database access can retrieve plaintext or easily reversible password representations, enabling lateral movement and unauthorized access to connected systems or accounts.