CVE-2012-2567

N/A Unknown

Published: May 22, 2012 Modified: April 29, 2026

Description

The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/

Source: cret@cert.org

http://secunia.com/advisories/49268

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/464683

Source: cret@cert.org

US Government Resource

http://www.securityfocus.com/bid/53634

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/75783

Source: cret@cert.org

http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/