Hardcoded credentials

2020-11-0603:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

CPENameOperatorVersion
studyplusle6.3.7
studyplusle8.29.0

CPE	Name	Operator	Version
	studyplus	le	6.3.7
	studyplus	le	8.29.0

References

jvn.jp/en/jp/JVN00414047/index.html