CVE-2025-41458

Published: Jul 21, 2025Modified: Jun 17, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: a341c0d1-ebf7-493f-a84e-38cf86618674 (Secondary)

Description

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (1)

https://www.cirosec.de/sa/sa-2025-005

Source: a341c0d1-ebf7-493f-a84e-38cf86618674

Timeline

No history available yet.