Skip to content
OpenAdvisories

Archive

22 May 2019

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 2.8

    BlueCats Reveal iOS App Insecure Storage

    The iOS mobile application BlueCats Reveal before 5.14 stores the username and password in the app cache as base64 encoded strings, i.e. clear text. These persist in the cache even if the user logs out. This can allow an attacker to compromise the affected Bl…

  • Low 2.8

    BlueCats Reveal Android App Insecure Storage

    The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage (30 days of no user activity). This can allow an attacker to…

  • Low 2.8

    Eaton Halo Home Android App Insecure Storage

    The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker t…

  • Low 2.7

    IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information a…