{"id":"CVE-2017-5250","state":"PUBLISHED","title":"In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.","description":"In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.","publishedAt":"2018-02-22T16:00:00.000Z","updatedAt":"2024-08-05T14:55:35.809Z","severity":null,"assigner":"rapid7","products":["Insteon Insteon for Hub"],"affected":[{"vendor":"Insteon","product":"Insteon for Hub","versions":[{"version":"1.9.7","status":"affected"}]}],"references":["https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/"],"weaknesses":["CWE-922"],"ingestedAt":"2026-10-29T19:43:49.051Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/5xxx/CVE-2017-5250.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-5250","state":"PUBLISHED","datePublished":"2018-02-22T16:00:00.000Z","dateUpdated":"2024-08-05T14:55:35.809Z","assignerShortName":"rapid7","assignerOrgId":"9974b330-7714-4307-a722-5648477acda7","dateReserved":"2017-01-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner."}],"affected":[{"vendor":"Insteon","product":"Insteon for Hub","versions":[{"version":"1.9.7","status":"affected"}]}],"references":[{"url":"https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-922","description":"CWE-922 (Insecure Storage of Sensitive Information)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"rapid7","dateUpdated":"2018-02-22T15:57:01.000Z","orgId":"9974b330-7714-4307-a722-5648477acda7"},"datePublic":"2018-02-22T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@rapid7.com","ID":"CVE-2017-5250","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Insteon for Hub","version":{"version_data":[{"version_value":"1.9.7"}]}}]},"vendor_name":"Insteon"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-922 (Insecure Storage of Sensitive Information)"}]}]},"references":{"reference_data":[{"name":"https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/","refsource":"MISC","url":"https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T14:55:35.809Z"}}]}}}