critical9.8
CVE-2019-11384
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e.
Impact
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/shared_prefs/login_data.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zalora | Zalora | Version 6.15.1 |