PT-2019-17793 · Hickory · Hickory Smart

Publicado 2019-08-22 · Atualizado 2020-10-16 · CVE-2019-5633

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hickory Smart for iOS versions 01.01.07 and prior

Description The issue is related to insecure storage of sensitive information. The application's database contains information that could be used to control lock devices remotely.

Recommendations For versions 01.01.07 and prior, update to a version later than 01.01.07 to resolve the issue.

Correção

Insecure Storage of Sensitive Information

Enumeração de Fraquezas

CWE-922

Identificadores relacionados

CVE-2019-5633

Produtos afetados

Hickory Smart

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-5633 · Aviso do Fabricante
• https://apps.apple.com/us/app/hickory-smart/id1189748191 · Nota
• https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-5633 · Nota de Segurança