CVE-2016-6546 iTrack Easy mobile application stores the user password in base-64 encoding/cleartext

2018-07-1320:00:00

CWE-313

certcc

www.cve.org

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

41.7%

JSON

The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cleartext.

CNA Affected

[
  {
    "product": "Easy",
    "vendor": "iTrack",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  }
]