PT-2018-5479
CVE-2017-13104
·
تاريخ النشر
2018-08-15
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
UberEATS version 1.108.10001
Description:
The issue concerns the use of a hard-coded key for encryption in the iOS application. This means that data stored using this key can be decrypted by anyone who can access the key.
Recommendations:
For version 1.108.10001, consider disabling the encryption feature that uses the hard-coded key until a patch is available that replaces the hard-coded key with a secure encryption method. Restrict access to sensitive data stored by the application to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾