Credential disclosure via plaintext process-memory retention

Credential exposure in Sangfor VDI Client 5.4.2.1006 allows local users to recover entered usernames and passwords from process memory. SangforCSClient.exe retains the Username and Password field contents in plaintext after a login attempt, placing them near predictable strings in a full process dump. Exploitation requires local access sufficient to capture and inspect that process memory after credentials have been entered, and the bounded consequence is disclosure of those credentials.