Description
The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zizai Technology | Tech Nut Mobile Application | — | — |
References
- 93877 vdb-entry
- https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
- VU#402847 third-party-advisory