CVE-2017-5249: Critical severity whmcs vulnerability
In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.
Other sources
Wink Wink - Smart Home Android app could allow a remote attacker to obtain sensitive information, caused by storing OAuth token in an insecure manner. A remote attacker could exploit this vulnerability to obtain sensitive information.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2017-5249.
What is the severity of CVE-2017-5249?
CVE-2017-5249 has a severity rating of 9.8 (Critical).
What is the affected software for CVE-2017-5249?
The affected software for CVE-2017-5249 is Wink - Smart Home Android app version 6.1.0.19 and prior.
What is the impact of CVE-2017-5249?
CVE-2017-5249 could allow a remote attacker to obtain sensitive information.
How can CVE-2017-5249 be exploited?
CVE-2017-5249 can be exploited by exploiting the insecure storage of OAuth token.