CVE-2016-6548 | BDVDB-2026-104306 Detail

Zizai TechnologyTech Nut Mobile Application

Description#

The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse the session token to gain full access the user's account.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

https://www.securityfocus.com/bid/93877
https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
https://www.kb.cert.org/vuls/id/402847

Exploit#

No public exploit known

History#

Version 12018-07-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.