Cleartext Password returned in JSON response

How it was found

Password was returned in the JSON response (For changing of password), which could be recovered by accessing the firefox.exe memory dump. The password string is persistent in the RAM (even after restarting Firefox application) until you restart the computer.

Refer to the .docx for more information