Researchers
Back
Linda Huischen
Researcher from
ERNW Research GmbH
#15142
of 60,403
20.5
Total CVSS
Vulnerabilities
·
3
Medium
1
High
2
PT-2021-17481
2021-08-02
5.9
CVE-2021-27499
Ypsomed
Ypsomed Mylife Cloud
The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which allows man-in-the-middle attackers to tamper with messages.
PT-2021-17475
2021-07-30
7.5
CVE-2021-27491
Ypsomed
Ypsomed Mylife Cloud
The Ypsomed mylife Cloud discloses password hashes during the registration process.
PT-2021-17478
2021-07-30
7.1
CVE-2021-27495
Ypsomed
Ypsomed Mylife Cloud
The Ypsomed mylife Cloud reflects the user password during the login process after redirecting the user from a HTTPS endpoint to a HTTP endpoint.