CVE-2021-26833
Assigner: mitre
Published: 2021-04-06T15:46:01
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
datePublic: 2021-04-05T00:00:00
descriptions: value: Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for user's account due to insufficient cache clearing mechanisms. A threat actor can obtain sensitive user data by decoding the tokens as JWT is signed and encoded, not encrypted.
problemTypes: descriptions: description: n/a
type: text