CVE-2018-17500

ALTO 7.8CVE-2018-17500 · Published 21/03/2019 · updated 17/06/2026

En resumen

CVE-2018-17500 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a passport (envoy).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.27%, mayor que el 19.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
passport envoy	`= 2.2.5= 2.4.0`	No fix yet

Description

Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of hardcoded OAuth Creds in plaintext. An attacker could exploit this vulnerability to obtain sensitive information.

References

exchange.xforce.ibmcloud.com/vulnerabilities/149660 · Third Party Advisory

Más vulnerabilidades de passport

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free