CVE-2019-14808

—

CVSS 3.1

6.8 medium

EPSS

1%p70

Published

Oct 9, 2019 (Oct 9, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without an integrity check, if a user changes personal data in his profile tab (e.g., exposure of his birthday) or logs into his account (i.e., exposure of credentials).

Vendors: renpho
Products: renpho
Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.