The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Passmanlite_password_manager | Martinicreations | * | 1.47 (including) |
| Passmanlite_password_manager | Martinicreations | 1.42 (including) | 1.42 (including) |
| Passmanlite_password_manager | Martinicreations | 1.43 (including) | 1.43 (including) |
| Passmanlite_password_manager | Martinicreations | 1.44 (including) | 1.44 (including) |
| Passmanlite_password_manager | Martinicreations | 1.45 (including) | 1.45 (including) |
| Passmanlite_password_manager | Martinicreations | 1.46 (including) | 1.46 (including) |
References
- http://securityreason.com/securityalert/8250
- http://www.securityfocus.com/bid/47765
- http://www.simonroses.com/wp-content/uploads/2011/05/SRF-SA-2011-01.txt
- http://securityreason.com/securityalert/8250
- http://www.securityfocus.com/bid/47765
- http://www.simonroses.com/wp-content/uploads/2011/05/SRF-SA-2011-01.txt