Unencrypted Storage of User Credentials in QMS Automotive

An attacker with access to the QMS Automotive database could read plaintext user credentials, allowing them to impersonate authorized users and access production scheduling or configuration data without detection.

Automotive manufacturing facilities and suppliers using QMS Automotive for production scheduling, order management, and quality control. Anyone managing production schedules, quality data, or manufacturing orders through QMS Automotive should prioritize this update.

An attacker needs access to the QMS Automotive user database (via compromised workstation, database access, or backup files). Once they retrieve the database, they can read plaintext credentials directly and use them to log in as legitimate users to the QMS system.