Rapid7 Researcher

The issue allows an attacker to impersonate a legitimate user by reusing stored OAuth authentication and refresh access tokens. These tokens are stored in a clear text file, which remains until the user logs out and reboots the device. An attacker could exploit this to view and change the user's personal information in the backend cloud service, but would first need to gain physical control of the Android device or compromise it with a malicious app.

The issue allows an attacker to compromise the affected BlueCats network implementation by accessing a clear text file that stores the `username` and `password`. This file remains on the device until the user logs out or the session times out after 30 days of inactivity. To exploit this, an attacker would first need to gain physical control of the Android device or compromise it with a malicious app.

The issue allows an attacker to compromise the affected BlueCats network implementation by accessing the username and password stored in the app cache as base64 encoded strings, essentially clear text, even after the user logs out. To exploit this, an attacker would first need to gain physical control of the iOS device or compromise it with a malicious app.