CVE-2018-17499

CVE-2018-17499 affects Envoy Passport for Android and Envoy Passport for iPhone. Connected CNVD-2019-08356 confirms an information-disclosure vulnerability caused by storing unencrypted data in logs, enabling a local attacker to access sensitive information such as two API keys and a token. Affec...

CVE-2018-17500

CVE-2018-17500 details (from provided documents) : Envoy Passport for Android and Envoy Passport for iPhone store hardcoded OAuth credentials in plaintext, enabling a local attacker to obtain sensitive information. The vulnerability is triggered by insecure storage of credentials in the applicati...