Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse.This issue affects Tap&Sign App: before V.1.025.
The product uses an environment variable to store unencrypted sensitive information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tap&sign | Tapandsign | * | 1.025 (excluding) |