CVE-2019-25605

HIGH

7.5

Descripcion

EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing user account credentials.

Detalles CVE

Puntuacion CVSS v3.17.5

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado3/22/2026

Ultima modificacion3/23/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-612

Referencias

https://play.google.com/store/apps/details?id=com.yieldnotion.equitypandit(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/46933(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/equitypandit-insecure-logging-information-disclosure(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.