CVE-2019-5627

Name of the Vulnerable Software and Affected Versions BlueCats Reveal versions prior to 5.14

Description The issue allows an attacker to compromise the affected BlueCats network implementation by accessing the username and password stored in the app cache as base64 encoded strings, essentially clear text, even after the user logs out. To exploit this, an attacker would first need to gain physical control of the iOS device or compromise it with a malicious app.

Recommendations For versions prior to 5.14, update to version 5.14 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and the BlueCats network implementation until the update can be applied.