Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:39 p.m.6 views

CVE-2020-5667

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

5.5CVSS6.6AI score0.00052EPSS
Exploits0References1
OSV
OSV
added 2020/11/06 3:15 a.m.1 views

CVE-2020-5667

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

5.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2020/11/06 3:15 a.m.11 views

CVE-2020-5667

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

5.5CVSS5.2AI score0.00052EPSS
Exploits0References1
Prion
Prion
added 2020/11/06 3:15 a.m.12 views

Hardcoded credentials

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

2.1CVSS5.2AI score0.00052EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/06 2:6 a.m.11 views

CVE-2020-5667

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

5.2AI score0.00052EPSS
Exploits0References1
CVE
CVE
added 2020/11/06 2:6 a.m.61 views

CVE-2020-5667

Studyplus App (Android v6.3.7 and earlier; iOS v8.29.0 and earlier) contains a hard-coded API key for an external service, enabling an attacker to retrieve the key by analyzing app data. Root cause: hard-coded credentials in the client. Impact: potential exposure of the external service API key; ...

5.5CVSS5.1AI score0.00052EPSS
Exploits0References1Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/11/05 12:0 a.m.43 views

JVN#00414047: Studyplus App uses a hard-coded API key for an external service

Studyplus App provided by Studyplus Inc. uses a hard-coded API key for an external service CWE-798. Impact API key for an external service may be obtained by analyzing data in the app. Note that a user is not directly affected by this vulnerability. Solution Update the Application Update the...

5.5CVSS5.2AI score0.00052EPSS
Exploits0
Rows per page
Query Builder