iTrack vulnerabilities

Newest CVEs

• CVE-2016-6546

  iTrack Easy mobile application stores the user password in base-64 encoding/cleartext

  iTrack · Easy

  High7.8
• CVE-2016-6545

  iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each request

  iTrack · Easy

  Critical9.8
• CVE-2016-6544

  iTrack Easy's getgps data can be modified without authentication

  iTrack · Easy

  High7.5
• CVE-2016-6543

  A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data

  iTrack · Easy

  Medium5.9
• CVE-2016-6542

  The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device

  iTrack · Easy

  Low3.7