In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat.
References
Link | Resource |
---|---|
https://pastebin.com/5ZDDCqgL | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-10-15 14:15
Updated : 2019-10-17 06:32
NVD link : CVE-2019-17398
Mitre link : CVE-2019-17398
JSON object : View
CWE
CWE-532
Insertion of Sensitive Information into Log File
Products Affected
darkhorse
- dark_horse_comics