CVE-2021-36460

{"id": "CVE-2021-36460", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-04-25T13:15:49.330", "references": [{"url": "http://veryfitpro.com", "tags": ["Not Applicable", "Third Party Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www.i-doo.cn", "tags": ["Not Applicable"], "source": "cve@mitre.org"}, {"url": "https://github.com/martinfrancois/CVE-2021-36460", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of passwords. This allows an attacker in possession of a hash to takeover a user's account, rendering the benefits of storing hashed passwords in the database useless."}, {"lang": "es", "value": "VeryFitPro (com.veryfit2hr.second) versi\u00f3n 3.2.8, cifra la contrase\u00f1a de la cuenta localmente en el dispositivo y usa el hash para autenticar en toda la comunicaci\u00f3n con la API del backend, incluyendo el inicio de sesi\u00f3n, el registro y el cambio de contrase\u00f1as. Esto permite a un atacante en posesi\u00f3n del hash tomar el control de la cuenta de un usuario, haciendo in\u00fatiles las ventajas de almacenar las contrase\u00f1as con hash en la base de datos"}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:veryfitpro_project:veryfitpro:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "C0FAAA0B-DCD4-44BA-8159-0FF7BFC5A670", "versionEndIncluding": "3.3.7"}, {"criteria": "cpe:2.3:a:veryfitpro_project:veryfitpro:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "7CB1B977-9AD4-40EC-8B44-91D4CDF59436", "versionEndIncluding": "3.3.7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}