CVE-2018-10812

MEDIUM

Bitpie Bitcoin Wallet < 3.2.4 - Cleartext Storage of Sensitive Information

Title source: llm

Description

The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/shared_prefs/com.bitpie_preferences.xml (on Android) or a plist file in the app data folder (on iOS).

References (2)

Core 2

Core References

Third Party Advisory

https://github.com/edwardz246003/misc/blob/master/Bitpie%20CVE-2018-10812..md

Broken Link x_refsource_misc

https://github.com/edwardz246003/misc/blob/master/Bitpie.md

Scores

CVSS v3 4.1

EPSS 0.0017

EPSS Percentile 6.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-312

Status published

Products (1)

bitpie/bitcoin_wallet < 3.2.4 (2 CPE variants)

Published May 08, 2018

Tracked Since Feb 18, 2026