PT-2020-18632
CVE-2020-5667
·
تاريخ النشر
2020-11-06
·
تاريخ التحديث
2020-11-17
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Studyplus App for Android versions 6.3.7 and earlier
Studyplus App for iOS versions 8.29.0 and earlier
Description
The issue concerns the use of a hard-coded API key for an external service in the affected apps. This could allow the API key to be obtained by analyzing data within the app.
Recommendations
For Studyplus App for Android versions 6.3.7 and earlier, consider removing or securely storing the hard-coded API key until a patch is available.
For Studyplus App for iOS versions 8.29.0 and earlier, consider removing or securely storing the hard-coded API key until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾