CVE-2015-1598

The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically proximate attackers to obtain sensitive information by examining the device filesystem.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2015-03-07

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Spcanywhere (Siemens)

References

• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-185226.pdf