CVE-2019-5626

CVE-2019-5626 describes a critical vulnerability in the BlueCats Reveal Android application prior to version 3.0.19, where user credentials (username and password) are stored in cleartext on the device. This flaw allows an attacker with physical access to the device or who has compromised it with a malicious application to retrieve these sensitive credentials, potentially leading to the compromise of the associated BlueCats network. Rated with a CVSS score of 7.8 (High), this vulnerability has a low attack complexity and requires local access, but can result in high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.