{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T13:09:53.157","vulnerabilities":[{"cve":{"id":"CVE-2018-17499","sourceIdentifier":"psirt@us.ibm.com","published":"2019-03-21T16:00:26.093","lastModified":"2026-06-17T01:45:58.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted data in logs. An attacker could exploit this vulnerability to obtain two API keys, a token and other sensitive information."},{"lang":"es","value":"Envoy Passport para Android y iPhone podría permitir que un atacante local obtenga información sensible, provocado por el almacenamiento de datos no cifrados en los registros. Un atacante podría explotar esta vulnerabilidad para obtener dos claves API, un token y otro tipo de información sensible."}],"affected":[{"source":"psirt@us.ibm.com","affectedData":[{"vendor":"Envoy","product":"Envoy Passport for iPhone","versions":[{"version":"2.2.5","status":"affected"}]},{"vendor":"Envoy","product":"Envoy Passport for Android","versions":[{"version":"2.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"psirt@us.ibm.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":2.9,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"},{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:envoy:passport:2.2.5:*:*:*:*:iphone_os:*:*","matchCriteriaId":"7BEAE86E-C111-4EB7-B8E8-77AA6C30E321"},{"vulnerable":true,"criteria":"cpe:2.3:a:envoy:passport:2.4.0:*:*:*:*:android:*:*","matchCriteriaId":"0106581C-AA22-4EFD-8AA5-DC1FA54849A9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/149659","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/149659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}}]}