Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2wjq-7fcc-4p8f

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.

EPSS

Процентиль: 36%
0.0015
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
больше 3 лет назад

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.

EPSS

Процентиль: 36%
0.0015
Низкий

5.5 Medium

CVSS3