Description (CNA)
Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Folder.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FluteCode / Secure Folder | affected 1.2 |
CWE
CWE-922
References
- https://fluidattacks.com/advisories/sanguisugabogg
- https://play.google.com/store/apps/details?id=com.securefolder.securevault
ADP enrichment
No English description supplied.
No references supplied.