Default credentials

In the Dark Horse Comics application 1.3.21 for Android, token information equivalent to the username and password is stored in the log during authentication, and may be available to attackers via logcat...

CVE-2019-17395

In the Rapid Gator application 0.7.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...

CVE-2019-17395

The CVE-2019-17395 entry pertains to the Rapid Gator Android app (version 0.7.1). The authentication process logs contain the user’s username and password, potentially exposing credentials to anyone with access to logcat. Affected component: Android authentication logging path. Root cause: creden...

CVE-2019-17394

The CVE-2019-17394 issue applies to the Seesaw Parent and Family Android app version 6.2.5, where usernames and passwords are logged during authentication and may be read from logcat. This credential leakage is the underlying vulnerability described in multiple sources (NVD, Red Hat, etc.). The a...

CVE-2019-17396

In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...

CVE-2019-17396

The CVE-2019-17396 entry concerns PowerSchool Mobile for Android (version 1.1.8). The underlying issue is that credentials (username and password) are logged during authentication and may be exposed to attackers via logcat. Affected component: authentication/logging path in the Android app. Impac...

CVE-2019-17355

In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...

CVE-2019-17398

In the Dark Horse Comics application 1.3.21 for Android, token information equivalent to the username and password is stored in the log during authentication, and may be available to attackers via logcat...

CVE-2019-17398

CVE-2019-17398 affects the Dark Horse Comics Android app (version 1.3.21). The token information used during authentication (equivalent to username and password) is stored in the app logs and may be exposed to anyone with local access to logcat. The provided documents do not include explicit expl...

CVE-2019-17397

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...

CVE-2019-17397

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...

CVE-2019-17397

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...

MOMO Momo application for Android trust management issue vulnerability

MOMO Momo application for Android is an open social application based on Android platform by China Stranger Technology MOMO. A trust management vulnerability exists in version 2.1.9 of the MOMO Momo application for Android, which stems from the program's failure to securely store confidential...

CVE-2019-13098

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 Jel...

CVE-2019-13099

The Momo application 2.1.9 for Android stores confidential information insecurely on the system i.e., in cleartext, which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat...

Default credentials

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 Jel...

Default credentials

The Momo application 2.1.9 for Android stores confidential information insecurely on the system i.e., in cleartext, which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat...

CVE-2019-13099

The Momo application 2.1.9 for Android stores confidential information insecurely on the system i.e., in cleartext, which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat...

CVE-2019-13099

The CVE-2019-13099 entry concerns the Momo Android app (version 2.1.9) storing confidential data in cleartext on the device, enabling a non-root user to retrieve usernames, passwords, and access tokens via Logcat. Root cause is insecure data storage; impact is exposure of user credentials. The co...

CVE-2019-13099

The Momo application 2.1.9 for Android stores confidential information insecurely on the system i.e., in cleartext, which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat...