The unencrypted content of this traffic is subsequently stored as local cache on the file system of the device. Version 5.3 of the Keeper® Password & Data Vault application for iOS has been found to perform various POST-requests to and/or using SSL/TLS that contain confidential information.
CALLPOD KEEPER PASSWORD MANAGER MAC OS X
Versions of the Keeper® software are available for multiple platforms including Android, BlackBerry, iOS, Windows Phone, Linux, Mac OS X and Windows. The iOS application is advertised to secure all confidential information with military-grade encryption (AES). Keeper® Password & Data Vault is a popular application that is used to store and access passwords and other confidential information. Published: 05-April-2013 16:33 CET Background Resolved: 04-April-2013, according to the vendor’s legal counsel Description: Unencrypted storage of confidential informationĪffects: Keeper® Password & Data Vault v5.3 for iOS
The full advisory (that includes all technical details) can be found below. We urge all users of this application to install this update as soon as they can, because user information that the app is meant to protect, including the user’s master password, was found to be stored unencrypted. Paul Pols of Fox-IT’s penetration testing team discovered a critical vulnerability in version 5.3 of the “Keeper® Password & Data Vault” app for iPhones, iPods touch and iPads.Īn update was released today that is said to resolve the issues that we identified.
0 kommentar(er)
