The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat.
References
Link | Resource |
---|---|
https://pastebin.com/SgVPb7Lb | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-07-22 09:15
Updated : 2020-08-24 10:37
NVD link : CVE-2019-13099
Mitre link : CVE-2019-13099
JSON object : View
CWE
CWE-312
Cleartext Storage of Sensitive Information
Products Affected
momo_project
- momo