Lucene search
HistoryMay 22, 2012 - 3:55 p.m.
CVE-2012-2567
xelex mobiletrack
android
hardcoded credentials
sensitive information
ftp
http
cve-2012-2567
nvd
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
Affected configurations
Node
xelexmobiletrackRange≤2.3.7
googleandroid
| CPE | Name | Operator | Version |
|---|---|---|---|
| xelex:mobiletrack | xelex mobiletrack | le | 2.3.7 |
Related
prion
prion
Hardcoded credentials
2012-05-22 15:55:00
cvelist
cvelist
CVE-2012-2567
2012-05-22 15:00:00
nvd
nvd
CVE-2012-2567
2012-05-22 15:55:02
cert
cert
Xelex Technologies MobileTrack contains multiple vulnerabilities
2012-05-21 00:00:00
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
Related for CVE-2012-2567