EUVD-2021-20653

Malware in sbrugna...

CVE-2021-33982

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

Session fixation

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

CVE-2021-33982

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

CVE-2021-33982

The vulnerability CVE-2021-33982 affects the Fish | Hunt FL iOS app (version 3.8.0 and earlier). It is described as an insufficient session expiration flaw that enables a remote attacker to reuse, spoof, or steal other users’ and admins’ sessions. Connected sources confirm the issue but do not pr...

CVE-2021-33981

CVE-2021-33981 affects the Fish | Hunt FL iOS app (versions 3.8.0 and earlier). The issue is an insecure direct object vulnerability in the hunting/fishing license retrieval function, allowing a remote authenticated attacker to access other users’ personal information and license images. Root cau...

PT-2021-20368

Name of the Vulnerable Software and Affected Versions: Fish | Hunt FL versions 3.8.0 and earlier Description: The issue concerns an insecure, direct object vulnerability in the hunting/fishing license retrieval function. This allows a remote authenticated attacker to retrieve other people's...

PT-2021-20369

Name of the Vulnerable Software and Affected Versions: Fish | Hunt FL versions 3.8.0 and earlier Description: An insufficient session expiration issue exists, allowing a remote attacker to reuse, spoof, or steal other user and admin sessions. Recommendations: For versions 3.8.0 and earlier, updat...

CVE-2021-33981: Authorization Bypass Through User-Controlled Key

An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remote authenticated attacker to retrieve other people's personal information and images of their hunting/fishing licenses...

CVE-2021-33982: Insufficient Session Expiration

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...