In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.Referenceshttps://pastebin.com/9VBiRpAR