Описание
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.
Ссылки
- Third Party Advisory
- Not Applicable
- Third Party Advisory
- Not Applicable
Уязвимые конфигурации
Конфигурация 1Версия до 1.5.1 (исключая)
cpe:2.3:a:aremis:aremis_4_nomads:*:*:*:*:*:android:*:*
EPSS
Процентиль: 1%
0.0001
Низкий
4.1 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-312
CWE-312
Связанные уязвимости
CVSS3: 5.5
github
почти 3 года назад
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.
EPSS
Процентиль: 1%
0.0001
Низкий
4.1 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-312
CWE-312