Advisories · Technology

iTrack Easy.

Every CVE that names iTrack Easy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2016-6546 CVE record

iTrack Easy mobile application stores the user password in base-64 encoding/cleartext
- iTrack Easy
- CWE-313
Not analysed yet 13 Jul 2018
CVE-2016-6545 CVE record

iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each request
- iTrack Easy
- Authentication bypass
Not analysed yet 13 Jul 2018
CVE-2016-6544 CVE record

iTrack Easy's getgps data can be modified without authentication
- iTrack Easy
- Authentication bypass
Not analysed yet 13 Jul 2018
CVE-2016-6543 CVE record

A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data
- iTrack Easy
- CWE-799
Not analysed yet 13 Jul 2018
CVE-2016-6542 CVE record

The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device
- iTrack Easy
- Information disclosure
Not analysed yet 13 Jul 2018