CVE-2019-5626— BlueCats Reveal for Android 信任管理问题漏洞

BlueCats Reveal Android App Insecure Storage

The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage (30 days of no user activity). This can allow an attacker to compromise the affected BlueCats network implementation. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.

N/A

敏感信息的不安全存储

BlueCats Reveal for Android 信任管理问题漏洞

BlueCats Reveal for Android是澳大利亚BlueCats公司的一款基于Android平台的定位信标管理应用程序。 基于Android平台BlueCats Reveal 3.0.19之前版本中存在信任管理问题漏洞。该漏洞源于网络系统或产品中缺乏有效的信任管理机制。攻击者可利用默认密码或者硬编码密码、硬编码证书等攻击受影响组件。

N/A

N/A