1. CVE-Search
  2. CVE-2007-5778
ID CVE-2007-5778
Summary Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network.
References
Vulnerable Configurations
  • cpe:2.3:a:flexispy:mobile_spy:-:*:*:*:*:*:*:*
    cpe:2.3:a:flexispy:mobile_spy:-:*:*:*:*:*:*:*
CVSS
Base: 6.4 (as of 14-02-2024 - 15:20)
Impact:
Exploitability:
CWE CWE-312
CAPEC
  • Retrieve Embedded Sensitive Data
    An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:P
refmap via4
bid 26177
bugtraq 20071023 Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection
misc
osvdb
  • 43625
  • 43626
sreason 3333
Last major update 14-02-2024 - 15:20
Published 01-11-2007 - 16:46
Last modified 14-02-2024 - 15:20
Back to Top