shinyColumn/CVE-2025-50110

shinyColumn/CVE-2025-50110

GitHubGitHub
GitHubgithub.com
Releases0
Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-50110↗
8.8 HIGH—

An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal server URLs, account IDs, passwords, and device tokens - as plaintext query parameters over HTTPS