What is CVE-2023-5879?

CVE-2023-5879 is a medium-severity vulnerability in Geniecompany Aladdin Connect, classified under CWE-922. CVSS score: 6.8/10. Published 2024-01-03.

How severe is CVE-2023-5879?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Geniecompany Aladdin Connect

CVE-2023-5879

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials.

EPSS: 0.004 (34.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Geniecompany Aladdin_connect
The Genie Company Aladdin Connect Mobile Application — versions 0

Weakness classification (CWE)

CWE-922

References

cve@rapid7.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-5879?: CVE-2023-5879 is a medium-severity vulnerability in Geniecompany Aladdin Connect, classified under CWE-922. CVSS score: 6.8/10. Published 2024-01-03.
How severe is CVE-2023-5879?: Medium severity. CVSS v3 base score is 6.8 out of 10.