漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Eaton Halo Home Android App Insecure Storage
Vulnerability Description
The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by reusing the stored OAuth token, thus allowing them to view and change the user's personal information stored in the backend cloud service. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.
CVSS Information
N/A
Vulnerability Type
敏感信息的不安全存储
Vulnerability Title
Eaton Halo Home for Android 权限许可和访问控制问题漏洞
Vulnerability Description
Eaton Halo Home for Android是美国Eaton公司的一款基于Android平台的家庭照明控制管理应用程序。 基于Android平台的Halo Home 1.11.0之前版本中存在安全漏洞，该漏洞源于程序将OAuth身份验证和刷新访问令牌存储在文明形式的文件中。攻击者可利用该漏洞伪造合法用户并查看或更改用户的个人信息。
CVSS Information
N/A
Vulnerability Type
N/A