Orbitz
1 CVEs
product
Monthly
In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Google
Information Disclosure
Orbitz
NVD
CVSS 3.1
9.8
EPSS
1.3%
EPSS 1%
CVSS 9.8
CRITICAL
POC
Act Now
In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Google
Information Disclosure
Orbitz
NVD