CVE-2019-14808 - An issue was discovered in the RENPHO application 3.0.0 for iOS

Back Back to CVE browser

MEDIUM

An issue was discovered in the RENPHO application 3.0.0 for iOS

Published Oct 9, 2019

6.8

MEDIUM

CVSS 3.1

EPSS 1.34%

Description

An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without an integrity check, if a user changes personal data in his profile tab (e.g., exposure of his birthday) or logs into his account (i.e., exposure of credentials).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (4)

http://packetstormsecurity.com/files/154772/RENPHO-3.0.0-Information-Disclosure.html
x_refsource_MISCThird Party AdvisoryVDB Entry
https://apps.apple.com/us/app/renpho/id1219889310
x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5937
Advisory
https://renpho.com/pages/contact-us
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/154772/RENPHO-3.0.0-Information-Disclosure.html		x_refsource_MISCThird Party AdvisoryVDB Entry
https://apps.apple.com/us/app/renpho/id1219889310		x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5937		Advisory
https://renpho.com/pages/contact-us		x_refsource_MISCVendor Advisory