Lucene search
PRIOn knowledge basePRION:CVE-2017-15999HistoryOct 29, 2017 - 5:29 p.m.
Design/Logic Flaw
2017-10-2917:29:00
PRIOn knowledge base
www.prio-n.com
3
In the “NQ Contacts Backup & Restore” application 1.1 for Android, no HTTPS is used for transmitting login and synced user data. When logging in, the username is transmitted in cleartext along with an SHA-1 hash of the password. The attacker can either crack this hash or use it for further attacks where only the hash value is required.
| CPE | Name | Operator | Version |
|---|---|---|---|
| contacts_backup_\\&_restore | eq | 1.1 |
Related
cve
cve
CVE-2017-15999
2022-10-03 16:23:34
nvd
nvd
CVE-2017-15999
2017-10-29 17:29:00
cvelist
cvelist
CVE-2017-15999
2022-10-03 16:23:34