CVE-2021-32612

The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP

published June 16, 2021

CVSS
—
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01094 · 65.2th percentile
Published
2021-06-16T11:53Z
EPSS history
Timeline
  • 16 JUN 11:53Z
    The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP
    cvelistv5