Tapandsign Technologies Tap&Sign App Password Recovery Exploitation Vulnerability

A vulnerability exists in the Tap&Sign App developed by Tapandsign Technologies, prior to version 1.025, allowing exploitation of the password recovery mechanism. This issue involves the cleartext storage of sensitive information in an environment variable, coupled with a weak password recovery process for forgotten passwords, which can be misused to manipulate application functionality.

Impact

Exploitation of this vulnerability could lead to unauthorized password recovery, allowing attackers to gain access to user accounts.

Remediation

Users are advised to update the Tap&Sign App to version 1.025 or later.