CVE-2019-13099: Momo Project Momo

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user and a user's access token via Logcat.

Affected products

Published 2019-07-22. Last modified 2026-06-17.