CVE-2019-17355

2019-10-1520:46:24

mitre

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.007

Percentile

79.7%

JSON

In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

References

pastebin.com/GgpFz3ZW