Andre Dierker Posted June 5, 2017 Report Share Posted June 5, 2017 Hi, I recently found a file named data.xml in my enpass directory. What is that for? And why the hell, it contains my email credentials in PLAINTEXT? Link to comment Share on other sites More sharing options...
Vinod Kumar Posted June 19, 2017 Report Share Posted June 19, 2017 Hello Andre! Thank you for reporting the vulnerability and co-operating with us throughout the fixing process. Well, the vulnerability has been fixed and the updated version 5.5.3 has been rolled out on June 12, 2017. More details here- https://www.enpass.io/blog/an-update-on-the-reported-vulnerability-of-enpass-for-android/ Also, it's a request to every Enpassian who's using the version 5.4.6 to 5.5.2 in Android to please update the app to the latest version 5.5.3 immediately. Cheers! Link to comment Share on other sites More sharing options...
Recommended Posts