CVE-2010-4214

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2010-11-09

Last modified

2024-09-17

Weaknesses

CWE-310

Affected products

• Wells Fargo Mobile (Wellsfargo)

References

• http://news.cnet.com/8301-27080_3-20021874-245.html
• http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html
• http://viaforensics.com/appwatchdog/wells-fargo-android.html