← Back to CVE List

CVE-2017-14487

Published: 2017-12-01T17:29Z
Last Modified: 2024-11-21T03:12Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The OhMiBod Remote app for Android and iOS allows remote attackers to impersonate users by sniffing network traffic for search responses from the OhMiBod API server and then editing the username, user_id, and token fields in data/data/com.ohmibod.remote2/shared_prefs/OMB.xml. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt