CVEvulnerability
CVE-2012-2567
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-05-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
Affected configurations
• xelex mobiletrack (<= 2.3.7)
Related
Weakness · not in database (1)
References
- http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/ blog.mobiledefense.com
- http://secunia.com/advisories/49268 secunia.com
- http://www.kb.cert.org/vuls/id/464683 US Government Resource
- http://www.securityfocus.com/bid/53634 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75783 exchange.xforce.ibmcloud.com
- http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/ blog.mobiledefense.com
- http://secunia.com/advisories/49268 secunia.com
- http://www.kb.cert.org/vuls/id/464683 US Government Resource
- http://www.securityfocus.com/bid/53634 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75783 exchange.xforce.ibmcloud.com