CVE-2019-14808

An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without an integrity check, if a user changes personal data in his profile tab (e.g., exposure of his birthday) or logs into his account (i.e., exposure of credentials).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/154772/RENPHO-3.0.0-Information-Disclosure.html
https://apps.apple.com/us/app/renpho/id1219889310
https://renpho.com/pages/contact-us
http://packetstormsecurity.com/files/154772/RENPHO-3.0.0-Information-Disclosure.html
https://apps.apple.com/us/app/renpho/id1219889310
https://renpho.com/pages/contact-us