Vulnerability · Published Jan 3, 2024 · Assigned by rapid7
CVE-2023-5879Aladdin Connect Android Application Insecure Storage
Medium 6.8
In plain English
A medium-severity security flaw in Aladdin Connect Mobile Application from The Genie Company. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.4%top 63.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The Genie Company | Aladdin Connect Mobile Application | 0 – through <=5.65 Build 2075 |
Weakness: CWE-922 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H