Description
Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse.
This issue affects Tap&Sign App: before V.1.025.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tapandsign Technologies | Tap&Sign App | < V.1.025 | V.1.025 |
References
- https://docs.tapandsign.com/tap-and-sign/tap-and-sign-v.1.025-surum-notlari
- https://www.usom.gov.tr/bildirim/tr-25-0063 government-resource broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0063 government-resource