Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's…

What to know

What it is

Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences. An attacker with access to the device's local data or a backup could retrieve usernames and passwords and use them to gain unauthorized access to accounts on the platform.

Affected

See advisory

Fix

Apply the vendor's security update; see the linked advisory.

Exploitation

No known exploitation