What the vulnerability does
01Description
The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users
CVSS base score
5.5/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Key dates
02Disclosure timeline
August 24, 2022
CVE published
April 16, 2025
Record updated
External resources
03References
Related vulnerabilities
