CVE-2017-5249

Summary

In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.

Affected Software

VendorProductVersion RangeStatus
Wink Labs IncWink - Smart Home6.1.0.19 and prioraffected

Weaknesses

  • CWE-922: CWE-922 (Insecure Storage of Sensitive Information)

ADP Enrichment

CVE Program Container

Additional References

References