CVE-2023-5879
Aladdin Connect Android Application Insecure Storage
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Jan 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
The Genie Company · Aladdin Connect Mobile ApplicationWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →