PT-2019-17788 · Bluecats · Bluecats Reveal

Rapid7 Researcher · Published 2019-05-22 · Updated 2020-10-16 · CVE-2019-5627

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlueCats Reveal versions prior to 5.14

Description The issue allows an attacker to compromise the affected BlueCats network implementation by accessing the username and password stored in the app cache as base64 encoded strings, essentially clear text, even after the user logs out. To exploit this, an attacker would first need to gain physical control of the iOS device or compromise it with a malicious app.

Recommendations For versions prior to 5.14, update to version 5.14 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and the BlueCats network implementation until the update can be applied.

Exploit

Fix

Insufficiently Protected Credentials

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-522

CWE-922

Related Identifiers

CVE-2019-5627

Affected Products

Bluecats Reveal

References · 4

• 🔥 https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5627 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5627 · Vendor Advisory
• https://itunes.apple.com/us/app/bc-reveal/id852676494 · Vendor Advisory