CVE record · 1 source
CVE-2026-54375
CVSS 8.4VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to extract or…
- Vendor
- Shenzhen Shine Industrial Co., Ltd.
- Product
- VitaFit
- CVSS v3.1
- 8.4 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-613
- Exposure class
- Mobile OS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to extract or…
VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to extract or intercept unencrypted m_session_id tokens stored in application backups, which…