CVE-2019-17355

Critical

In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available…

mitre·CWE-532·Published 2019-10-15

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

163 chars

In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

NVDen

163 chars

In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

En la aplicación Orbitz versión 19.31.1 para Android, el nombre de usuario y la contraseña son almacenados en el registro durante la autenticación, y pueden estar disponibles para atacantes por medio de logcat.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H