Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2019/04/04 2:34 p.m.•29 views

CVE-2018-19981

Amazon AWS SDK =2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege...

7AI score0.01797EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/04 12:00 a.m.•4 views

CVE-2018-19981: Cleartext Storage of Sensitive Information

Amazon AWS SDK =2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege...

9CVSS5.8AI score0.01797EPSS
SaveExploits1References2
Rows per page
Query Builder