CVE-2024-12094: Information Disclosure Vulnerability in Tinxy
5.4
CVSS
Description
This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information such as username, email address and mobile number.
Classification
CVE ID: CVE-2024-12094
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.4
Affected Products
Vendor: Mogify Infotech
Product: Tinxy
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)