JVN#60702986: BlueStacks App Player fails to restrict access permissions

BlueStacks App Player fails to restrict access permissions (CWE-284).

Impact

A user with access to the network that is connected to the affected product may gain unauthorized access.

Solution

Update the Software
Windows users should update to the latest version of software according to the information provided by the developer.

Apply Workarounds
macOS users should apply the following workarounds to mitigate the effects of this vulnerability.

• Do not connect BlueStacks installed machine to the network
• Block access from outside to 5555/TCP

Products Affected

• BlueStacks App Player for Windows 3.0.0 to 4.31.55
• BlueStacks App Player for macOS 2.0.0 and later