Medium severity6.8NVD Advisory· Published Oct 9, 2019· Updated Jun 17, 2026

CVE-2019-14808

Description

An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without an integrity check, if a user changes personal data in his profile tab (e.g., exposure of his birthday) or logs into his account (i.e., exposure of credentials).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

RENPHO/RENPHO2 versions
cpe:2.3:a:renpho:renpho:3.0.0:*:*:*:*:iphone_os:*:*+ 1 more
- cpe:2.3:a:renpho:renpho:3.0.0:*:*:*:*:iphone_os:*:*
- (no CPE)range: = 3.0.0
RENPHO/RENPHO applicationdescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/154772/RENPHO-3.0.0-Information-Disclosure.htmlnvdThird Party AdvisoryVDB Entry
renpho.com/pages/contact-usnvdVendor Advisory
apps.apple.com/us/app/renpho/id1219889310nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000