CVE-2018-11242
Last modified
CVE-2018-11242 is a vulnerability of currently unknown severity. An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive information disclosure, as demonstrated by data/com.makemytrip/databases and data/com.makemytrip/Cache SQLite database files.. EPSS estimates a 4.13% chance of exploitation in the next 30 days.
Description
An issue was discovered in the MakeMyTrip application 7.2.4 for Android. The databases (locally stored) are not encrypted and have cleartext that might lead to sensitive information disclosure, as demonstrated by data/com.makemytrip/databases and data/com.makemytrip/Cache SQLite database files.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Makemytrip | Makemytrip | 7.2.4 |
References
- https://gist.github.com/NinjaXshell/ba0aeee4b77b4bdea76d0c0c095d53b1Third Party Advisory
- https://www.exploit-db.com/exploits/44690/Exploit, Third Party Advisory, VDB Entry
- https://gist.github.com/NinjaXshell/ba0aeee4b77b4bdea76d0c0c095d53b1Third Party Advisory
- https://www.exploit-db.com/exploits/44690/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-11242?
How severe is CVE-2018-11242?
How do I fix CVE-2018-11242?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-11236stdlib/canonicalize.c in the GNU C Library (aka glibc or lib…
- CVE-2018-11237An AVX-512-optimized implementation of the mempcpy function …7.8
- CVE-2018-11239An integer overflow in the _transfer function of a smart con…
- CVE-2018-1124procps-ng before version 3.3.15 is vulnerable to multiple in…7.8
- CVE-2018-11240An issue was discovered on SoftCase T-Router build 20112017 …
- CVE-2018-11241An issue was discovered on SoftCase T-Router build 20112017 …
- CVE-2018-11243PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows re…
- CVE-2018-11244The BBE theme before 1.53 for WordPress allows a direct laun…
- CVE-2018-11245app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS wi…
- CVE-2018-11246K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 ha…7.5
- CVE-2018-11247The JMX/RMI interface in Nasdaq BWise 5.0 does not require a…
- CVE-2018-11248util/FileDownloadUtils.java in FileDownloader 1.7.3 does not…
Are you affected by CVE-2018-11242?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST