CVE-2025-41458
Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS
- State
- Published
- Severity
- 5.5 Medium
- Published
- Jul 21, 2025
- Updated
- Jul 21, 2025
- Reserved
- Apr 16, 2025
Description
Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | cirosec |
Weaknesses
- CWE-312 Cleartext Storage of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
JourneyTwo App Studio |
|
References
- https://www.cirosec.de/sa/sa-2025-005third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.