Hardcoded credentials

2017-08-0114:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content out, for example the private key of the user.

CPENameOperatorVersion
heinekingmediale1.7.5

CPE	Name	Operator	Version
	heinekingmedia	le	1.7.5

References

seclists.org/fulldisclosure/2017/Jul/90