Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
BabyChakra Pregnancy & Parenting App app.babychakra.babychakra Configuration.java credentials storage
Vulnerability Description
A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an unknown function of the file file app/babychakra/babychakra/Configuration.java of the component app.babychakra.babychakra. Performing a manipulation of the argument SEGMENT_WRITE_KEY results in unprotected storage of credentials. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
明文存储口令
Vulnerability Title
BabyChakra Pregnancy & Parenting App 安全漏洞
Vulnerability Description
BabyChakra Pregnancy & Parenting App是印度BabyChakra公司的一款孕期与育儿服务应用。 BabyChakra Pregnancy & Parenting App 5.4.3.0及之前版本存在安全漏洞，该漏洞源于对组件app.babychakra.babychakra的文件app/babychakra/babychakra/Configuration.java中参数SEGMENT_WRITE_KEY的操作不当，可能导致凭据未受保护存储。
CVSS Information
N/A
Vulnerability Type
N/A