CVE-2021-26833

Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files…

published April 6, 2021

CVSS
—
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for user's account due to insufficient cache clearing mechanisms. A threat actor can obtain sensitive user data by decoding the tokens as JWT is signed and encoded, not encrypted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00979 · 61.8th percentile
Published
2021-04-06T15:46Z
EPSS history
Timeline
  • 06 APR 15:46Z
    Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files…
    cvelistv5