The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypted password once a session has ended.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4861
Reference (s):
- http://thycotic.com/products/secret-server/resources/advisories/cve-2014-4861/