Riskcovery

CVE-2020-6653

Sensitive date stored in logcat file

State
Published
Severity
3.8 Low
Published
Aug 12, 2020
Updated
Sep 17, 2024
Reserved
Jan 9, 2020

Read the record on cve.org

Description

Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's account and associated devices.

Scores

CVSSScoreVectorSource
3.13.8 LowCVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:NEaton

Weaknesses

  • CWE-200 Information Exposure
  • CWE-532 Information Exposure Through Log Files

Affected Products

ProductVersions
Secure Connect Mobile AppEaton
  • 1.7.3 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.