Eaton HALO Home 1.9.0 for Android
Approved changes feed: RSS · Atom
cpe:2.3:a:eaton:halo_home:1.9.0:*:*:*:*:android:*:*
part: a version: 1.9.0 update: *
| Vendor | Eaton (b7450635-db8f-5426-bd84-6f4be38222d9) |
|---|---|
| Product | Halo Home (f2445a1e-70d5-5c9f-9aca-2b8a0b2902b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-5625 |
vulnerable | 2026-06-08 05:14:07.891382 |
Eaton Halo Home Android App Insecure Storage
LOW (2.8)
The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by reusing the stored OAuth token, thus allowing them to view and change the user's personal information stored in the backend cloud service. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.
Published: 2019-05-22T18:11:12.000Z
Updated: 2024-08-04T20:01:52.038Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.