CVE-2018-11544

The Olive Tree Ftp Server application 1.32 for Android has Insecure Data Storage because a username and password are stored in the…

published May 29, 2018

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

⚠️ Your FTP username and password are chilling in plaintext! The Olive Tree FTP Server app for Android is storing credentials insecurely, leaving your data wide open. 🔥 Think of it like leaving your house key under the welcome mat for anyone to find — it's just too easy for a crafty intruder! In this case, anyone with access to the app’s files can lift your sensitive data with virtually no effort. This could lead to unauthorized access to your FTP server, allowing attackers to view or manipulate files. Depending on what you’re storing, this can be absolutely devastating — your private data could be compromised!

Put simply

Think of it like leaving your house key under the welcome mat for anyone to find — it's just too easy for a crafty intruder! In this case, anyone with access to the app’s files can lift your sensitive data with virtually no effort. This vulnerability arises because the Olive Tree FTP Server application stores the username and password in an unencrypted format in its shared preferences file, making it easy to extract for anyone accessing the device.

What to do

This could lead to unauthorized access to your FTP server, allowing attackers to view or manipulate files. Depending on what you’re storing, this can be absolutely devastating — your private data could be compromised! To secure your credentials, consider switching to an FTP server that encrypts sensitive data. If that's not possible, try to minimize the risk by ensuring your device is secure and removing any sensitive information from the app's storage. Always keep your applications updated! You've got this! Just follow these steps to keep your data safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01504 · 74.1th percentile
Published
2018-05-29T21:00Z
EPSS history
Timeline
  • 29 MAY 21:00Z
    The Olive Tree Ftp Server application 1.32 for Android has Insecure Data Storage because a username and password are stored in the…
    cvelistv5