CVE-2019-17398 - In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat

Back Back to CVE browser

CRITICAL

In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat

Published Oct 15, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.30%

Description

In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7802
Advisory
https://pastebin.com/5ZDDCqgL
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7802		Advisory
https://pastebin.com/5ZDDCqgL		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 15, 2019

Updated Aug 5, 2024

Reserved Oct 9, 2019

Link CVE-2019-17398

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-17398

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-17398

ENISA EUVD

Assigner mitre

Published Oct 15, 2019

Updated Aug 5, 2024

Exploited since n/a

Link EUVD-2019-7802

EUVD-2019-7802