Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:ypsomed_mylife_cloud,_mylife_mobile_application:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductYpsomed Mylife Cloud, Mylife Mobile Application (3f5d52ef-f73c-5154-b59c-48bd1bde78ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27503 vulnerable 2026-06-08 05:31:21.714205 Details available
Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the application layer of the communication protocol between the Ypsomed mylife App and mylife Cloud credentials based on hard-coded secrets, which allows man-in-the-middle attackers to tamper with messages.
Published: 2021-08-02T20:42:13.000Z
Updated: 2024-08-03T21:26:09.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27499 vulnerable 2026-06-08 05:31:21.710420 Details available
Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which allows man-in-the-middle attackers to tamper with messages.
Published: 2021-08-02T20:42:09.000Z
Updated: 2024-08-03T21:26:09.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27495 vulnerable 2026-06-08 05:31:21.707874 Details available
Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,he Ypsomed mylife Cloud reflects the user password during the login process after redirecting the user from a HTTPS endpoint to a HTTP endpoint.
Published: 2021-07-30T21:08:26.000Z
Updated: 2024-08-03T21:26:08.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27491 vulnerable 2026-06-08 05:31:21.697882 Details available
Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,The Ypsomed mylife Cloud discloses password hashes during the registration process.
Published: 2021-07-30T21:08:19.000Z
Updated: 2024-08-03T21:26:09.214Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.