CVE-2018-10812

Published: May 8, 2018Modified: Nov 21, 2024

4.1

Vector

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.5 / Impact: 3.6

Source: NVD

Description

The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/shared_prefs/com.bitpie_preferences.xml (on Android) or a plist file in the app data folder (on iOS).

Affected (2)

Products: Bitpie: Bitcoin Wallet

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Bitpie Bitcoin Wallet	Up to 3.2.4
Bitpie Bitcoin Wallet	Up to 3.2.4

Related CWEs

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (3)

https://github.com/edwardz246003/misc/blob/master/Bitpie.md

Source: cve@mitre.org

Broken Link

https://github.com/edwardz246003/misc/blob/master/Bitpie%20CVE-2018-10812..md

Source: nvd@nist.gov

Third Party Advisory

https://github.com/edwardz246003/misc/blob/master/Bitpie.md

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.