RSS   Vulnerabilities for 'The olive tree ftp server'   RSS

2018-06-15
 
CVE-2018-12481

CWE-200
 

 
The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" field with the Drozer post.capture.clipboard module.

 
2018-05-29
 
CVE-2018-11544

CWE-522
 

 
The Olive Tree Ftp Server application 1.32 for Android has Insecure Data Storage because a username and password are stored in the /data/data/com.theolivetree.ftpserver/shared_prefs/com.theolivetree.ftpserver_preferences.xml file as the prefUsername and prefUserpass strings.

 


Copyright 2024, cxsecurity.com

 

Back to Top