CVE-2016-6546

PoC —

CVSS 3.0

7.8 high

EPSS

<1%p34

Published

Jul 13, 2018 (Jul 13, 2018)

Modified

Jun 17, 2026

Description

The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cleartext.

Vendors: kkmcn
Products: itrackeasy
Weakness: CWE-313, CWE-200, CWE-255
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.