Read the docs

Envoy

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Envoy records in CISA KEV

No Envoy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Passport 2 records LOW

Records

2 records in Passport · all components

TI-2018-12490 CVE-2018-17500 · GHSA-v7qx-j3q6-rmfj

Insufficiently protected credentials in Envoy Passport for iPhone

Priority LOW 34

Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of hardcoded OAuth Creds in plaintext.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00272 Published 2019-03-19 No fix listed CWE-522
TI-2018-12489 CVE-2018-17499 · GHSA-mjr4-9rv8-9g3f

Cleartext storage of sensitive information in Envoy Passport for iPhone

Priority LOW 24

Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted data in logs.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00206 Published 2019-03-19 No fix listed CWE-312
Open these records in search →