Описание
An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive information disclosure, as demonstrated by data/com.makemytrip/databases and data/com.makemytrip/Cache SQLite database files.
Ссылки
- Third Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:makemytrip:makemytrip:7.2.4:*:*:*:*:android:*:*
EPSS
Процентиль: 88%
0.04084
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-312
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive information disclosure, as demonstrated by data/com.makemytrip/databases and data/com.makemytrip/Cache SQLite database files.
EPSS
Процентиль: 88%
0.04084
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-312