Tpc Software Matchpoint vulnerabilities
- tpc software matchpoint API keys, credentials, and configuration parameters embedded in the MatchPoint APK 5.1 Medium
- tpc software matchpoint Incorrect validation of TLS certificates in the MatchPoint Android app 9.1 Critical
- tpc software matchpoint Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint 8.7 High
- tpc software matchpoint SQL injection in the push notification handler of the MatchPoint Android app 8.6 High
- tpc software matchpoint Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences 6.9 Medium
- tpc software matchpoint Insecure direct object reference (IDOR) vulnerability in the MatchPoint API 9.9 Critical
- tpc software matchpoint A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform 9.9 Critical