Description
A valid set of credentials in a .js file and a static token for
communication were obtained from the decompiled IPA. An attacker could
use the information to disrupt normal use of the application by changing
the translation files and thus weaken the integrity of normal use.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ossur | Mobile Logic Application | < 1.5.5 | 1.5.5 |
Advisories 1
- ICSMA-24-354-01 Ossur Mobile Logic Application CISA ICS & IT advisories · Dec 19, 2024