An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.
Existe una vulnerabilidad de divulgación de información en la aplicación Schneider Electric's IGSS Mobile, en versiones 3.01 y anteriores. Las contraseñas se almacenan en texto claro en la configuración, lo que puede resultar en la exposición de información sensible.
AV:L/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-522
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | igss_mobile | * | <built-in method update of dict object at 0x7e6107f3ad40> | Application |
| schneider-electric | igss_mobile | * | <built-in method update of dict object at 0x7e60a88c3680> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:android:*:* |
| Yes | cpe:2.3:a:schneider-electric:igss_mobile:*:*:*:*:*:iphone_os:*:* |