CVE-2021-43388: Unisys Cargo Mobile

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag (in the manifest) is False.

Affected products

  • Unisys Cargo Mobile: before 1.2.29 (fixed in 1.2.29)

Published 2021-12-14. Last modified 2026-06-17.