high7.8
CVE-2016-6547
The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.
Impact
The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nutspace | Nut Mobile | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
- https://www.kb.cert.org/vuls/id/402847
- https://www.securityfocus.com/bid/93877
- https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
- https://www.kb.cert.org/vuls/id/402847
- https://www.securityfocus.com/bid/93877