CVE-2019-17397

Published: Oct 15, 2019Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

Affected (1)

Products: Doordash: Doordash

Doordash

1 product

Doordash

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Doordash Doordash	Up to 11.5.2

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://pastebin.com/hGg5efMe

Source: cve@mitre.org

ExploitThird Party Advisory

https://pastebin.com/hGg5efMe

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.