CVE-2016-6546CWE-313

iTrack Easy mobile application stores the user password in base-64 encoding/cleartext

published July 13, 2018

CVSS
—
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cleartext.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00409 · 33.7th percentile
Weakness
CWE-313 · Cleartext Storage in a File or on Disk
Published
2018-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    iTrack Easy mobile application stores the user password in base-64 encoding/cleartext
    cvelistv5