CVE-2017-5250

Summary

In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.

Affected Software

VendorProductVersion RangeStatus
InsteonInsteon for Hub1.9.7affected

Weaknesses

  • CWE-922: CWE-922 (Insecure Storage of Sensitive Information)

ADP Enrichment

CVE Program Container

Additional References

References