CVE-2012-2567

Description

The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/75783

http://www.securityfocus.com/bid/53634

http://www.kb.cert.org/vuls/id/464683

http://secunia.com/advisories/49268

http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS