1. Home
  2. CVE Database
  3. CVE-2019-17398
CRITICAL · 9.8

CVE-2019-17398

In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via l...

Vulnerability Description

In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via logcat.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DarkhorseDark Horse Comics1.3.21

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2019-17398?

CVE-2019-17398 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication, and may be available to attackers via l...

How severe is CVE-2019-17398?

CVE-2019-17398 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-17398?

Check the references section above for vendor advisories and patch information. Affected products include: Darkhorse Dark Horse Comics.