TI-2017-03358 CVE-2017-5249 · GHSA-vfc9-93vh-4x8hInsecure storage of sensitive information in Wink - Smart HomePriority MEDIUM 44In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0086 · Published 2018-02-22 · No fix listed CWE-922