CVE-2017-14486

The CVE-2017-14486 issue affects the Vibease Wireless Remote Vibrator app (Android) and the Vibease Chat app (iOS). The root cause is cleartext message exchange between the apps and use of the PLAIN SASL mechanism to transmit authentication tokens to Vibease servers, enabling an attacker who can ...