Local information disclosure via world-readable configuration files

Information disclosure in Nozomi Networks Arc before 1.6.0 allows local users to read sensitive configuration data on Windows systems. Arc creates its Windows configuration files with permissions that make them readable by every local account, exposing stored sensitive data. A low-privileged local account is required, and the documented consequence is disclosure of configuration contents rather than modification or service interruption.