CVE-2017-13102

Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
References
Link Resource
https://www.kb.cert.org/vuls/id/787952 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/787952 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:gameloft:asphalt_xtreme:1.6.0:*:*:*:*:iphone_os:*:*

History

21 Nov 2024, 03:10

Type Values Removed Values Added
References () https://www.kb.cert.org/vuls/id/787952 - Third Party Advisory, US Government Resource () https://www.kb.cert.org/vuls/id/787952 - Third Party Advisory, US Government Resource

Information

Published : 2018-08-15 22:29

Updated : 2024-11-21 03:10


NVD link : CVE-2017-13102

Mitre link : CVE-2017-13102

CVE.ORG link : CVE-2017-13102


JSON object : View

Products Affected

gameloft

  • asphalt_xtreme
CWE
CWE-798

Use of Hard-coded Credentials