CVE-2026-111491 : Detail

CVE-2026-111491

2026-11-05
22h17 +00:00
A04-Insecure Design
2026-11-05
22h36 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-256 Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.

Referensi