Lucene search
HistoryAug 16, 2022 - 8:15 a.m.
CVE-2022-35734
hulu android app
hard-coded
api key
external service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
51.4%
‘Hulu / フールー’ App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
Affected configurations
Node
hjholdingshuluRange3.0.47–3.1.2android
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hjholdings | hulu | * | cpe:2.3:a:hjholdings:hulu:*:*:*:*:*:android:*:* |
References
Related
cve
cve
CVE-2022-35734
2022-08-16 08:15:09
jvn
jvn
cvelist
cvelist
CVE-2022-35734
2022-08-16 07:02:16
prion
prion
Hardcoded credentials
2022-08-16 08:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
51.4%
Related for NVD:CVE-2022-35734