Home / vulnerabilities

PDF

PassmanLite Cleartext Secrets

Posted on 09 May 2011
Source : packetstormsecurity.org Link

 

Simon Roses Femerling Security Advisory
www.simonroses.com

Title: Clear Text Secrets in PassmanLite Could Allow Access to Passwords
SRF ID: SRF-ADV-2011-01
CVE ID: CVE-2011-1840
Release Date: 06/05/2011
Affected Products: Passman Lite Password Manager 1.47 and ealier
Vendor: MARTINI CREATIONS

Technical Description
---------------------

PassmanLite Password Manager, an Android App to store and protect passwords on mobile devices, stores the master password
and database accounts in clear text.

Impact
------

Successful exploitation of this vulnerability allows access to all information protected by the application.
However for this attack to success, attacker would require access to system shell or being able to read files through
another attack vector.

Solution
--------

Upgrade to Passman Lite 1.48 via Android Market.

Feedback
--------

If you have additional information or corrections for this security advisory please contact us at www.simonroses.com

 

TOP