Vulnerabilities in iTrack
5 resultsCVE-2016-6544—iTrack Easy's getgps data can be modified without authenticationEPSS 3.4%CVE-2016-6545—iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each requestEPSS 3.1%CVE-2016-6543—A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS dataEPSS 2.2%CVE-2016-6542—The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the deviceEPSS 1.8%CVE-2016-6546—iTrack Easy mobile application stores the user password in base-64 encoding/cleartextEPSS 0.4%