CVE-2019-17396

CRITICAL 9.8CVE-2019-17396 · Published 15/10/2019 · updated 17/06/2026

In short

CVE-2019-17396 is a CRITICAL (CVSS 9.8) vulnerability affecting powerschool mobile (powerschool).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.8% of all vulnerabilities.
Fix: update to 1.1.8 or later.

Package	Affected versions	Patched versions
powerschool mobile powerschool	`< 1.1.8`	`1.1.8`

Description

In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

References

pastebin.com/9VBiRpAR · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free