PT-2019-13849
CVE-2019-14808
·
تاريخ النشر
2019-10-09
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
RENPHO application version 3.0.0
Description
The issue concerns the transmission of JSON data without encryption and integrity checks. Specifically, when a user updates personal data in the profile tab, such as their birthday, or logs into their account, exposing their credentials, this data is sent unencrypted to a server.
Recommendations
For RENPHO application version 3.0.0, consider avoiding changes to personal data and refraining from logging into the account until a secure version is available. As a temporary workaround, restrict the use of the profile update and login features to minimize the risk of data exposure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾