Lucene search

K
hackeroneN33dm0n3yH1:792850
HistoryFeb 11, 2020 - 12:42 a.m.

Nord Security: Hard-coded API keys at NordVpn Android App

2020-02-1100:42:03
n33dm0n3y
hackerone.com
332

Hello NordVpn,

APK Version : 4.6.2****API’S at res/values/strings.xml

>Google>google_api_key = AIzaSyBySEqk7_WWee9bxpw5BM1eJeUx1TWdH_EStripe
>stripe_publishable_api_key = pk_live_j1Mt911wyZwAhATA9TYdA8q2

Referance;
>https://stripe.com/docs/keys

Impact

Cleartext Storage of Sensitive Information