CVE-2017-5249

2018-02-2216:00:00

CWE-922

rapid7

www.cve.org

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

In version 6.1.0.19 and prior of Wink Labs’s Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.

CNA Affected

[
  {
    "product": "Wink - Smart Home",
    "vendor": "Wink Labs Inc",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.0.19 and prior"
      }
    ]
  }
]