Описание
In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries.
Ссылки
- Issue TrackingThird Party Advisory
- Issue TrackingThird Party Advisory
- Issue TrackingThird Party Advisory
- Issue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:writediary:diary_with_lock:4.72:*:*:*:*:android:*:*
EPSS
Процентиль: 45%
0.00222
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-798
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries.
EPSS
Процентиль: 45%
0.00222
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-798