VULNERABILITY INTELLIGENCE

CVE-2019-17398

CVSS score9.8 CRITICAL

EPSS probability1.30%

CISA KEVNot currently listed

Published2019-10-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat.

Weakness classification

nvd@nist.gov: CWE-532

Primary references

cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory