CVE-2019-17397

Critical

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be…

mitre·CWE-532·Published 2019-10-15

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

172 chars

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

NVDen

172 chars

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

En la aplicación DoorDash versiones hasta 11.5.2 para Android, el nombre de usuario y la contraseña son almacenados en el registro durante la autenticación, y pueden estar disponibles para atacantes por medio de logcat.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H