CVE-2023-5879 Aladdin Connect Android Application Insecure Storage

2024-01-0319:15:59

CWE-922

rapid7

www.cve.org

cve-2023-5879

genie company

android devices

clear text authentication credentials

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

21.5%

JSON

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users’ clear text authentication credentials.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Android"
    ],
    "product": "Aladdin Connect Mobile Application",
    "vendor": "The Genie Company",
    "versions": [
      {
        "lessThanOrEqual": "<=5.65 Build 2075",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]