CVEvulnerability

CVE-2007-5778

7.5 HIGH Published 2007-11-01 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-11-01
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Weaknesses: CWE-312

Description

Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network.

Affected configurations

• flexispy mobile spy

Weakness · CWE (1)

CWE-312 Cleartext Storage of Sensitive Information weakness

Referenced by CWE · observed example (2)

CWE-311 Missing Encryption of Sensitive Data weakness
CWE-312 Cleartext Storage of Sensitive Information weakness

References

http://osvdb.org/43625 Broken Link
http://osvdb.org/43626 Broken Link
http://securityreason.com/securityalert/3333 Broken Link
http://www.airscanner.com/security/07101401_mobilespy.htm Broken Link
http://www.informit.com/articles/article.aspx?p=1077909 Third Party Advisory
http://www.securityfocus.com/archive/1/482663/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/26177 Broken Link, Third Party Advisory, VDB Entry
http://osvdb.org/43625 Broken Link
http://osvdb.org/43626 Broken Link
http://securityreason.com/securityalert/3333 Broken Link
http://www.airscanner.com/security/07101401_mobilespy.htm Broken Link
http://www.informit.com/articles/article.aspx?p=1077909 Third Party Advisory
http://www.securityfocus.com/archive/1/482663/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/26177 Broken Link, Third Party Advisory, VDB Entry