ASUS WebStorage Android Security Bypass Vulnerability

ASUS WebStorage is an online storage service from ASUS China.A security vulnerability exists in ASUS WebStorage Android, which could be exploited by attackers to log into a regular user account to access, modify, or delete user account information...

CVE-2022-26672

ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...

CVE-2022-26672

ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...

Hardcoded credentials

ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...

CVE-2022-26672 ASUS WebStorage - Use of Hard-coded Credentials

ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...

CVE-2022-26672

The CVE-2022-26672 entry concerns ASUS WebStorage where a hardcoded API token in the APP source enables an unauthenticated remote attacker to connect to the server and perform login attempts to general user accounts. A successful login allows access to, modification of, or deletion of user accoun...

CVE-2022-26672: Use of Hard-coded Credentials

ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...

ASUS WebStorage 信任管理问题漏洞

ASUS WebStorage is an online storage service from ASUS China.A security vulnerability exists in ASUS WebStorage Android, which could be exploited by attackers to log into a regular user account to access, modify, or delete user account information...

Information Disclosure

ng2-webstorage is vulnerable to information disclosure. This is because the key in local storage is not cleared properly after deletion. The stored sensitive information should be deleted after the deletion of a key remains until the page is refreshed...