CVE-2019-13099 - The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat

Back Back to CVE browser

MEDIUM

The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat

Published Jul 22, 2019

6.5

MEDIUM

CVSS 3.0

EPSS 0.75%

Description

The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-312

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4641
Advisory
https://pastebin.com/SgVPb7Lb
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4641		Advisory
https://pastebin.com/SgVPb7Lb		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 22, 2019

Updated Aug 4, 2024

Reserved Jun 30, 2019

Link CVE-2019-13099

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-13099

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 22, 2019

Updated Aug 4, 2024

Link EUVD-2019-4641

GitHub

No data