Описание
Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service.
Ссылки
- Third Party Advisory
- Product
- Vendor Advisory
- Third Party Advisory
- Product
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.11.1 (включая) до 8.6.0 (включая)
cpe:2.3:a:spooncast:spoon:*:*:*:*:*:android:*:*
EPSS
Процентиль: 13%
0.00046
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-798
CWE-798
Связанные уязвимости
CVSS3: 5.5
github
больше 1 года назад
Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service.
EPSS
Процентиль: 13%
0.00046
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-798
CWE-798