What is the CVSS score of CVE-2023-5879?

CVE-2023-5879 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Aladdin Connect are affected by CVE-2023-5879?

Organizations using clear text in The Genie Company Aladdin Connect Mobile Application should be aware of notable risk from CVE-2023-5879 rated CVSS 6.8.

How to fix or mitigate CVE-2023-5879?

Within 30 days: Identify affected systems running clear text in The Genie Company Aladdin Connect Mobile Appli and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Aladdin Connect CVE-2023-5879

MEDIUM

Insecure Storage of Sensitive Information (CWE-922)

2024-01-03 cve@rapid7.com

Google Information Disclosure Aladdin Connect Android

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:33 vuln.today

CVE Published

Jan 03, 2024 - 20:15 nvd

MEDIUM 6.8

DescriptionCVE.org

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials.

AnalysisAI

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-922. Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 (and below) on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication credentials. Affected products include: Geniecompany Aladdin Connect. Version information: Version 5.65.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.