CVE-2017-5249 In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.
CriticalCVSS 9.8
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wink | <= 6.1.0.19 | No fix listed |
| Wink Labs Inc Wink - Smart Home | = 6.1.0.19 and prior | No fix listed |
References
- blog.rapid7.com third-party-advisory