PT-2018-10622 · Firebase · Werewolf Online

Manhnho · Publicado 2018-05-26 · Atualizado 2018-07-09 · CVE-2018-11505

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Werewolf Online application version 0.8.8

Description The issue allows attackers to discover the Firebase token by reading logcat output.

Recommendations For version 0.8.8, consider restricting access to logcat output to prevent unauthorized discovery of the Firebase token until a patch is available.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-11505

Produtos afetados

Werewolf Online

Referências · 4

• 🔥 https://pastebin.com/NtPn3jB8 · Exploit
• 🔥 https://exploit-db.com/exploits/44776 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-11505 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-11505 · Aviso do Fabricante