Veryfitpro Project

veryfitpro_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Veryfitpro

veryfitpro

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-36460 1Veryfitpro Project 1Veryfitpro Jul 9, 2026 Apr 25, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of pass...Show more VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of passwords. This allows an attacker in possession of a hash to takeover a user's account, rendering the benefits of storing hashed passwords in the database useless.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-36460

1Veryfitpro Project

1Veryfitpro

Jul 9, 2026

Apr 25, 2022

N/A· v4

7.8 HIGH· v3

4.6 MEDIUM· v2

VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of passwords. This allows an attacker in possession of a hash to takeover a user's account, rendering the benefits of storing hashed passwords in the database useless.Show less