PT-2007-6745 · Retina X Studios · Mobile Spy

Seth Fogie · Publicado 2007-11-01 · Atualizado 2024-02-14 · CVE-2007-5778

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mobile Spy (affected versions not specified)

Description The issue concerns the storage and transmission of sensitive information. Specifically, it involves storing login credentials in cleartext under a specific registry key and sending login credentials and log data over a cleartext HTTP connection. This allows attackers to obtain sensitive information either by reading the registry or by sniffing the network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2007-5778

Produtos afetados

Mobile Spy

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-5778 · Nota de Segurança
• http://securityfocus.com/archive/1/482663/100/0/threaded · Nota
• http://securityfocus.com/bid/26177 · Nota
• http://securityreason.com/securityalert/3333 · Nota
• http://osvdb.org/43625 · Nota
• http://airscanner.com/security/07101401_mobilespy.htm · Nota
• http://informit.com/articles/article.aspx?p=1077909 · Nota
• http://osvdb.org/43626 · Nota