Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vpp2-j4x9-vp5c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/.xml to gain unauthorized access.

TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/.xml to gain unauthorized access.

EPSS

Процентиль: 42%
0.00197
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 9.8
nvd
больше 6 лет назад

TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/shared_prefs/<wallet-name>.xml to gain unauthorized access.

EPSS

Процентиль: 42%
0.00197
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-312