CVE-2025-47147
MEDIUMCVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
2Tags
Description
Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile Client versions prior to 9.40.123.
Analysis
s mobile device to extract the session token and exploit access for a limited duration.
This issue affects Command Centre Mobile Client versions up to 9.40.123. is affected by cleartext storage of sensitive information (CVSS 5.7).
Technical Context
This vulnerability (CWE-312: Cleartext Storage of Sensitive Information) affects s mobile device to extract the session token and exploit access for a limited duration.
This issue affects Command Centre Mobile Client. Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration.
This issue affects Command Centre Mobile Client versions prior to 9.40.123.
Affected Products
Product: s mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile Client. Versions: up to 9.40.123..
Remediation
Monitor vendor advisories for a patch.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today