CVE-2025-41458

Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS PUBLISHED

Description (CNA)

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.

Affected (CNA)

Vendor / product	Versions
Two App Studio / Journey	affected 0 through 5.5.9

CWE

CWE-312

References

https://www.cirosec.de/sa/sa-2025-005

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.