CVE-2016-6546

CVE-2016-6546: iTrack Easy mobile application stores the user password in base-64 encoding/cleartext

Weakness CWE-313
Published July 13, 2018
Last update August 6, 2024

CVSS base score

What the vulnerability does

01Description

The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cleartext.

Key dates

02Disclosure timeline

July 13, 2018 CVE published
August 6, 2024 Record updated