CVE-2012-2567 The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session...
LowCVSS 2.6
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xelex mobiletrack | <= 2.3.7 | No fix listed |
References
- blog.mobiledefense.com
- 49268 third-party-advisory
- VU#464683 third-party-advisory us-government-resource
- 53634 vdb-entry
- mobiletrack-ftp-info-disclosure(75783) vdb-entry