Andre Dierker Posted June 5, 2017 Report Posted June 5, 2017 Hi, I recently found a file named data.xml in my enpass directory. What is that for? And why the hell, it contains my email credentials in PLAINTEXT?
Vinod Kumar Posted June 19, 2017 Report Posted June 19, 2017 Hello Andre! Thank you for reporting the vulnerability and co-operating with us throughout the fixing process. Well, the vulnerability has been fixed and the updated version 5.5.3 has been rolled out on June 12, 2017. More details here- https://www.enpass.io/blog/an-update-on-the-reported-vulnerability-of-enpass-for-android/ Also, it's a request to every Enpassian who's using the version 5.4.6 to 5.5.2 in Android to please update the app to the latest version 5.5.3 immediately. Cheers!
Recommended Posts