Simon Roses Femerling Security Advisory www.simonroses.com Title: Clear Text Secrets in PassmanLite Could Allow Access to Passwords SRF ID: SRF-ADV-2011-01 CVE ID: CVE-2011-1840 Release Date: 06/05/2011 Affected Products: Passman Lite Password Manager 1.47 and ealier Vendor: MARTINI CREATIONS Technical Description --------------------- PassmanLite Password Manager, an Android App to store and protect passwords on mobile devices, stores the master password and database accounts in clear text. Impact ------ Successful exploitation of this vulnerability allows access to all information protected by the application. However for this attack to success, attacker would require access to system shell or being able to read files through another attack vector. Solution -------- Upgrade to Passman Lite 1.48 via Android Market. Feedback -------- If you have additional information or corrections for this security advisory please contact us at www.simonroses.com