Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-34490

XAAP Android Data Stored in Unencrypted Database

Description

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls XAAP Application

Default version status: unaffected

  • 0 to < 1.53affected

References