CVE-2016-6538

CVE-2016-6538: TrackR Bravo mobile application stores account passwords in cleartext

Weakness CWE-313
Published July 6, 2018
Last update August 6, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.

Key dates

02Disclosure timeline

July 6, 2018 CVE published
August 6, 2024 Record updated