PT-2019-13125 · Momo · Momo

Momoa Guest · Published 2019-07-22 · Updated 2020-08-24 · CVE-2019-13099

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Momo application version 2.1.9

Description The issue allows a non-root user to access confidential information, including usernames, passwords, and access tokens, which are stored insecurely in cleartext on the system. This can be achieved by accessing Logcat.

Recommendations For Momo application version 2.1.9, consider restricting access to Logcat to minimize the risk of exploitation until a secure method of storing sensitive information is implemented.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2019-13099

Affected Products

Momo

References · 3

• 🔥 https://pastebin.com/SgVPb7Lb · Exploit
• https://osv.dev/vulnerability/CVE-2019-13099 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13099 · Security Note