CVE-2024-12604

Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse. This issue affects Tap&Sign App: before V.1.025.

Score

CVSS 3.1 6.5 Medium

Status

Modified - iletisim@usom.gov.tr

Published

2025-03-10

Last modified

2026-06-01

Weaknesses

CWE-312, CWE-526, CWE-640

Affected products

• Tap&sign (Tapandsign)
• Tapsign App (Tapandsign Technologies)

References

• https://docs.tapandsign.com/tap-and-sign/tap-and-sign-v.1.025-surum-notlari
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0063
• https://www.usom.gov.tr/bildirim/tr-25-0063