الباحثون
رجوع
Linda Huischen
باحث من
ERNW Research GmbH
#15136
من 60,403
20.5
إجمالي CVSS
الثغرات
·
3
متوسطة
1
عالية
2
PT-2021-17481
2021-08-02
5.9
CVE-2021-27499
Ypsomed
Ypsomed Mylife Cloud
The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which allows man-in-the-middle attackers to tamper with messages.
PT-2021-17475
2021-07-30
7.5
CVE-2021-27491
Ypsomed
Ypsomed Mylife Cloud
The Ypsomed mylife Cloud discloses password hashes during the registration process.
PT-2021-17478
2021-07-30
7.1
CVE-2021-27495
Ypsomed
Ypsomed Mylife Cloud
The Ypsomed mylife Cloud reflects the user password during the login process after redirecting the user from a HTTPS endpoint to a HTTP endpoint.