9.8
CVE-2017-5250
- EPSS 0.15%
- Veröffentlicht 22.02.2018 16:29:00
- Zuletzt bearbeitet 21.11.2024 03:27:22
- Quelle cve@rapid7.com
- CVE-Watchlists
- Unerledigt
LoginIn version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Insteon ≫ Insteon For Hub SwPlatformandroid Version <= 1.9.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.366 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-312 Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE-922 Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.