CVE-2025-41458 - Vulnerability Details - OpenCVE

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00008.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2025-22081	Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.cirosec.de/sa/sa-2025-005

History

Mon, 21 Jul 2025 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 21 Jul 2025 11:15:00 +0000

Type	Values Removed	Values Added
Description		Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.
Title		Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS
Weaknesses		CWE-312
References		https://www.cirosec.de/sa/sa-2025-005
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: cirosec

Published: 2025-07-21T11:01:13.982Z

Updated: 2025-07-21T12:28:22.467Z

Reserved: 2025-04-16T10:48:40.810Z

Link: CVE-2025-41458

Vulnrichment

Updated: 2025-07-21T12:28:19.611Z

NVD

Status : Awaiting Analysis

Published: 2025-07-21T11:15:23.640

Modified: 2025-07-22T13:06:07.260

Link: CVE-2025-41458

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-41458", "assignerOrgId": "a341c0d1-ebf7-493f-a84e-38cf86618674", "state": "PUBLISHED", "assignerShortName": "cirosec", "dateReserved": "2025-04-16T10:48:40.810Z", "datePublished": "2025-07-21T11:01:13.982Z", "dateUpdated": "2025-07-21T12:28:22.467Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["iOS"], "product": "Journey", "vendor": "Two App Studio", "versions": [{"lessThanOrEqual": "5.5.9", "status": "affected", "version": "0", "versionType": "semver"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "This vulnerability assumes a jailbroken device.\n\n<br>"}], "value": "This vulnerability assumes a jailbroken device."}], "credits": [{"lang": "en", "type": "finder", "value": "Hannes Allmann (cirosec GmbH) <hannes.allmann@cirosec.de>"}], "datePublic": "2020-07-10T10:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app\u2019s filesystem. "}], "value": "Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app\u2019s filesystem."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-312", "description": "CWE-312 Cleartext Storage of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a341c0d1-ebf7-493f-a84e-38cf86618674", "shortName": "cirosec", "dateUpdated": "2025-07-21T11:01:13.982Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://www.cirosec.de/sa/sa-2025-005"}], "source": {"advisory": "SA-2025-005", "discovery": "USER"}, "timeline": [{"lang": "en", "time": "2025-03-12T15:07:00.000Z", "value": "Vendor was contacted and informed about the vulnerability via email."}, {"lang": "en", "time": "2025-03-25T08:05:00.000Z", "value": "Second attempt was made to contact vendor via email."}, {"lang": "en", "time": "2025-06-25T10:46:00.000Z", "value": "Third attempt was made to contact vendor via email."}], "title": "Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-21T12:28:16.325042Z", "id": "CVE-2025-41458", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-21T12:28:22.467Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-41458", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-21T12:28:16.325042Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-21T12:28:19.611Z"}}], "cna": {"title": "Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS", "source": {"advisory": "SA-2025-005", "discovery": "USER"}, "credits": [{"lang": "en", "type": "finder", "value": "Hannes Allmann (cirosec GmbH) <hannes.allmann@cirosec.de>"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Two App Studio", "product": "Journey", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "5.5.9"}], "platforms": ["iOS"], "defaultStatus": "unknown"}], "timeline": [{"lang": "en", "time": "2025-03-12T15:07:00.000Z", "value": "Vendor was contacted and informed about the vulnerability via email."}, {"lang": "en", "time": "2025-03-25T08:05:00.000Z", "value": "Second attempt was made to contact vendor via email."}, {"lang": "en", "time": "2025-06-25T10:46:00.000Z", "value": "Third attempt was made to contact vendor via email."}], "datePublic": "2020-07-10T10:00:00.000Z", "references": [{"url": "https://www.cirosec.de/sa/sa-2025-005", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app\u2019s filesystem.", "supportingMedia": [{"type": "text/html", "value": "Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app\u2019s filesystem. ", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-312", "description": "CWE-312 Cleartext Storage of Sensitive Information"}]}], "configurations": [{"lang": "en", "value": "This vulnerability assumes a jailbroken device.", "supportingMedia": [{"type": "text/html", "value": "This vulnerability assumes a jailbroken device.\n\n<br>", "base64": false}]}], "providerMetadata": {"orgId": "a341c0d1-ebf7-493f-a84e-38cf86618674", "shortName": "cirosec", "dateUpdated": "2025-07-21T11:01:13.982Z"}}}, "cveMetadata": {"cveId": "CVE-2025-41458", "state": "PUBLISHED", "dateUpdated": "2025-07-21T12:28:22.467Z", "dateReserved": "2025-04-16T10:48:40.810Z", "assignerOrgId": "a341c0d1-ebf7-493f-a84e-38cf86618674", "datePublished": "2025-07-21T11:01:13.982Z", "assignerShortName": "cirosec"}, "dataVersion": "5.1"}