CVE-2021-27491

HIGH

Ypsomed mylife - Info Disclosure

Title source: llm

Description

Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,The Ypsomed mylife Cloud discloses password hashes during the registration process.

Scores

CVSS v3 7.5
EPSS 0.0022
EPSS Percentile 44.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (2)

ypsomed/mylife < 1.7.5
ypsomed/mylife_cloud < 1.7.2

Timeline

Published Jul 30, 2021
Tracked Since Feb 18, 2026