Medium
6.9
Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's...
CVE-2026-111491
First seen on SecPulse
Original description The description as published by the source.
Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web incibe.es
- web nvd.nist.gov
- web github.com