VULNERABILITY INTELLIGENCE

CVE-2018-10812

CVSS score4.1 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2018-05-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/shared_prefs/com.bitpie_preferences.xml (on Android) or a plist file in the app data folder (on iOS).

Weakness classification

  • CWE-312: Cleartext Storage of Sensitive Information

Primary references