PT-2026-52637 · Unknown · Setracker2 Android Companion App
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Setracker2 Android Companion App com.tgelec.setracker versions prior to 3.1.6
Description
The application only requires the password hash when authenticating with backend services from the client. This flaw allows an attacker who possesses the hash to bypass standard authentication and gain full access to the account.
Recommendations
Update to a version newer than 3.1.5.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Setracker2 Android Companion App