Popular Mobile Document-Management Apps Put Data at Risk

guest · Feb 22, 2020

Popular Mobile Document-Management Apps Put Data at Risk
February 20, 2020
https://www.darkreading.com/mobile/...agement-apps-put-data-at-risk-/d/d-id/1337110

Dozens of popular file management apps published by a popular operator of an online document management system do not encrypt file transfers to and from user devices, potentially exposing data.

Mobile security firm Wandera, which discovered the issue, described it as impacting 23 of 29 Cometdocs apps on Apple's App Store.
A random sampling of 31 Android versions of the same apps that Cometdocs has published on Google's official Play store showed them to be leaking private files as well, Wandera said.

"The Cometdocs applications are transferring files without using encryption (via http), providing bad actors the opportunity to cache and retrieve the files," the security vendor said in a report Thursday. The lack of encryption also gives attackers on the same Wi-Fi network as the user an opportunity to access files as they are transmitted to and from Cometdocs servers.
"This is the first time I have seen entire documents sent across the network without strong encryption," says Michael Covington, vice president of product at Wandera.
Click to expand...

Cometdocs claims that some 3 million people worldwide currently use its software. The company offers both a free and paid version of its document conversion service.

"One reason for the popularity of Cometdocs' apps could be that many businesses are not equipped with an IT-approved PDF-converter tool. So employees are likely simply going to Apple and Google's mobile app stores and installing something they can use to quickly convert files. "
Click to expand...

Wandera: Document management apps exposing files on employee devices

Log in or Sign up

Popular Mobile Document-Management Apps Put Data at Risk

guest Guest

Log in or Sign up

Popular Mobile Document-Management Apps Put Data at Risk

guest Guest

Useful Searches