CWE Code: 312
Vulnerability Type: sql_injection
CVSS Score: 4.0
CWE Name:  Cleartext Storage of Sensitive Information
Summary: an issue was discovered in the makemytrip application 7.2.4 for android. the databases (locally stored) are not encrypted and have cleartext that might lead to sensitive information disclosure, as demonstrated by data/com.makemytrip/databases and data/com.makemytrip/cache sqlite database files.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-05-20
Last Modified Date: 2019-10-03