CVE-2024-12604

—

CVSS 3.1

6.5 medium

EPSS

<1%p10

Published

Mar 10, 2025 (Mar 10, 2025)

Modified

Jun 17, 2026

Description

Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse. This issue affects Tap&Sign App: before V.1.025.

Vendors: tapandsign
Products: tap\&sign
Weakness: CWE-526, CWE-640, CWE-312
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.