JVN#60702986: BlueStacks App Player fails to restrict access permissions

2018-10-24T00:00:00
ID JVN:60702986
Type jvn
Reporter Japan Vulnerability Notes
Modified 2018-10-30T00:00:00

Description

## Description

BlueStacks App Player fails to restrict access permissions (CWE-284).

## Impact

A user with access to the network that is connected to the affected product may gain unauthorized access.

## Solution

Update the Software
Windows users should update to the latest version of software according to the information provided by the developer.

Apply Workarounds
macOS users should apply the following workarounds to mitigate the effects of this vulnerability.

  • Do not connect BlueStacks installed machine to the network
  • Block access from outside to 5555/TCP

## Products Affected

  • BlueStacks App Player for Windows 3.0.0 to 4.31.55
  • BlueStacks App Player for macOS 2.0.0 and later