32 matches found
PT-2022-12983
Name of the Vulnerable Software and Affected Versions Jimoty App for Android versions prior to 3.7.42 Description The issue concerns the use of a hard-coded API key for an external service in the app. This could allow the API key to be obtained by analyzing the app's data, potentially leading to...
CVE-2021-20748
Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...
PT-2021-14203
Name of the Vulnerable Software and Affected Versions: Retty App for Android versions prior to 4.8.13 Retty App for iOS versions prior to 4.11.14 Description: The issue concerns the use of a hard-coded API key for an external service in the Retty App. This could allow the API key to be obtained b...
JVN#26891339: Multiple vulnerabilities in Retty App
Retty App provided by Retty Inc. contains multiple vulnerabilities listed below. The app is launched by Custom URL Scheme and a user may be led to access an arbitrary URL CWE-939 - CVE-2021-20747 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N| Base Score:...
CVE-2021-33220
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist...
PT-2021-20091
Name of the Vulnerable Software and Affected Versions CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier Description An issue was discovered where hard-coded API keys exist. Recommendations For CommScope Ruckus IoT Controller versions 1.7.1.0 and earlier, update to a version that...
CommScope Ruckus IoT Controller 1.7.1.0 Hard-Coded API Keys Exposed
KL-001-2021-002: CommScope Ruckus IoT Controller Hard-coded API Keys Exposed Title: CommScope Ruckus IoT Controller Hard-coded API Keys Exposed Advisory ID: KL-001-2021-002 Publication Date: 2021.05.26 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2021-002.txt 1. Vulnerabilit...
CommScope Ruckus IoT Controller Hard-coded API Keys Exposed
Vulnerability Details Affected Vendor: CommScope Affected Product: Ruckus IoT Controller Affected Version: 1.7.1.0 and earlier Platform: Linux CWE Classification: CWE-798: Use of Hard-coded Credentials CVE ID: CVE-2021-33220 2. Vulnerability Description API keys for CommScope Ruckus are included...
PT-2020-18632
Name of the Vulnerable Software and Affected Versions Studyplus App for Android versions 6.3.7 and earlier Studyplus App for iOS versions 8.29.0 and earlier Description The issue concerns the use of a hard-coded API key for an external service in the affected apps. This could allow the API key to...
JVN#00414047: Studyplus App uses a hard-coded API key for an external service
Studyplus App provided by Studyplus Inc. uses a hard-coded API key for an external service CWE-798. Impact API key for an external service may be obtained by analyzing data in the app. Note that a user is not directly affected by this vulnerability. Solution Update the Application Update the...
PT-2020-7987
Name of the Vulnerable Software and Affected Versions: NETGEAR genie application version prior to 2.4.34 for Android Description: The issue concerns the mishandling of hard-coded API keys and session IDs. Recommendations: For versions prior to 2.4.34, update to version 2.4.34 or later to resolve...
