CVE-2019-5626

The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage (30 days of no user activity). This can allow an attacker to compromise the affected BlueCats network implementation. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.

CVSS v3 7.8 HIGH
CVSS v2.0 2.1 LOW

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.bluecats.bcreveal	Product
https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.bluecats.bcreveal	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:bluecats:bluecats_reveal:*:*:*:*:*:android:*:*

History

21 Nov 2024, 04:45

Type	Values Removed	Values Added
References	~~() https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/ - Exploit, Third Party Advisory~~	() https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/ - Exploit, Third Party Advisory
References	~~() https://play.google.com/store/apps/details?id=com.bluecats.bcreveal - Product~~	() https://play.google.com/store/apps/details?id=com.bluecats.bcreveal - Product

Information

Published : 2019-05-22 18:29

Updated : 2024-11-21 04:45

NVD link : CVE-2019-5626

Mitre link : CVE-2019-5626

CVE.ORG link : CVE-2019-5626

JSON object : View

Products Affected

bluecats

bluecats_reveal

CWE

CWE-922

Insecure Storage of Sensitive Information

CWE-522

Insufficiently Protected Credentials

{"id": "CVE-2019-5626", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "cve@rapid7.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 2.8, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.1}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2019-05-22T18:29:01.210", "references": [{"url": "https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@rapid7.com"}, {"url": "https://play.google.com/store/apps/details?id=com.bluecats.bcreveal", "tags": ["Product"], "source": "cve@rapid7.com"}, {"url": "https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://play.google.com/store/apps/details?id=com.bluecats.bcreveal", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cve@rapid7.com", "description": [{"lang": "en", "value": "CWE-922"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-522"}]}], "descriptions": [{"lang": "en", "value": "The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage (30 days of no user activity). This can allow an attacker to compromise the affected BlueCats network implementation. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app."}, {"lang": "es", "value": "La aplicaci\u00f3n m\u00f3vil de Android BlueCats Reveal version anterior a 3.0.19, almacena el nombre de usuario y la contrase\u00f1a en un archivo de texto sin cifrar. Este archivo persiste hasta que el usuario termina sesi\u00f3n o la sesi\u00f3n finaliza debido a la falta de uso (30 d\u00edas sin actividad del usuario). Esto pudiera permitir que un atacante comprometa la implementaci\u00f3n de la red BlueCats afectada. El atacante primero tendr\u00eda que obtener el control f\u00edsico del dispositivo Android o comprometerlo con una app maliciosa."}], "lastModified": "2024-11-21T04:45:15.840", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bluecats:bluecats_reveal:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "AE90C309-6EF6-42D5-9D91-A13EC50076E6", "versionEndExcluding": "3.0.19"}], "operator": "OR"}]}], "sourceIdentifier": "cve@rapid7.com"}

7.8 /10