CVE-2025-61121

Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credential leakage…

High · published October 30, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

⚡ A straightforward oversight in the Mobile Scanner Android App could expose sensitive cloud service credentials! Think of it like leaving your house keys under the welcome mat – anyone could waltz in and take what they want without any trouble! If an attacker gets their hands on these credentials, they could access sensitive information and misuse cloud resources at will, leading to serious privacy breaches. Imagine the chaos of having your private data exposed or your cloud infrastructure hijacked for malicious purposes!

Put simply

Think of it like leaving your house keys under the welcome mat – anyone could waltz in and take what they want without any trouble! This vulnerability arises from improper handling of cloud service credentials in the Mobile Scanner Android App version 2.12.38, allowing unauthorized parties to obtain these secrets.

What to do

If an attacker gets their hands on these credentials, they could access sensitive information and misuse cloud resources at will, leading to serious privacy breaches. Imagine the chaos of having your private data exposed or your cloud infrastructure hijacked for malicious purposes! To protect yourself, update the Mobile Scanner app to the latest version as soon as it's available, and review your cloud service configurations for any exposed credentials. Additionally, consider implementing stricter access controls and regular audits of your cloud resources. You've got this! With a few quick actions, you can safeguard your privacy and keep your cloud resources secure! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.6th percentile
Published
2025-10-30T00:00Z
EPSS history
Timeline
  • 30 OCT 00:00Z
    Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credential leakage…
    cvelistv5