Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9q6r-crw3-948m

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML file.

In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML file.

EPSS

Процентиль: 2%
0.00015
Низкий

7.8 High

CVSS3

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 7.8
nvd
больше 8 лет назад

In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML file.

EPSS

Процентиль: 2%
0.00015
Низкий

7.8 High

CVSS3

Дефекты

CWE-327