CVE-2017-11129

2017-08-0114:00:00

mitre

www.cve.org

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content out, for example the private key of the user.

References

seclists.org/fulldisclosure/2017/Jul/90