JVN#49047921: Jimoty App for Android uses a hard-coded API key for an external service

Jimoty App for Android provided by Jimoty, Inc. uses a hard-coded API key for an external service (CWE-798).

Impact

API key for an external service may be obtained by analyzing data in the app.
Note that a user is not directly affected by this vulnerability.

Solution

Update the Application
Update the application to the latest version according to the information provided by the developer.

According to the developer, the latest app does not hard-code the API key.
The vulnerable API key has been deactivated, therefore information contained in the vulnerable app can not be abused.

Products Affected

• Jimoty App for Android versions prior to 3.7.42