Hardcoded credentials

2014-11-0418:55:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%

JSON

The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selection of an HTTP session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which the user had intended to use HTTPS.

CPENameOperatorVersion
notes_travelerle9.0.1.2

CPE	Name	Operator	Version
	notes_traveler	le	9.0.1.2

References

www-01.ibm.com/support/docview.wss?uid=swg21688840

www.kb.cert.org/vuls/id/432608

www.securityfocus.com/bid/70871

exchange.xforce.ibmcloud.com/vulnerabilities/96810