8 matches found
EUVD-2019-3062
Malware in sbrugna...
Default credentials
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system i.e. plain text, which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/sharedprefs/logindata.xml...
CVE-2019-11384
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system i.e. plain text, which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/sharedprefs/logindata.xml...
CVE-2019-11384
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system i.e. plain text, which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/sharedprefs/logindata.xml...
CVE-2019-11384
The CVE-2019-11384 entry describes the Zalora Android app (version 6.15.1) storing credentials in plaintext under /data/data/com.zalora.android/shared_prefs/login_data.xml, enabling a non-root user to retrieve the username/password. The vulnerability is due to insecure local storage of sensitive ...
CVE-2019-11384
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system i.e. plain text, which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/sharedprefs/logindata.xml...
CVE-2019-11384: Cleartext Storage of Sensitive Information
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system i.e. plain text, which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/sharedprefs/logindata.xml...
PT-2019-12272
Name of the Vulnerable Software and Affected Versions Zalora application version 6.15.1 Description The issue allows a non-root user to obtain the username and password of a valid user due to insecure storage of confidential information in plain text. This can be accessed via the...