PT-2018-10622 · Firebase · Werewolf Online

Manhnho · Published 2018-05-26 · Updated 2018-07-09 · CVE-2018-11505

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Werewolf Online application version 0.8.8

Description The issue allows attackers to discover the Firebase token by reading logcat output.

Recommendations For version 0.8.8, consider restricting access to logcat output to prevent unauthorized discovery of the Firebase token until a patch is available.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-11505

Affected Products

Werewolf Online

References · 4

• 🔥 https://pastebin.com/NtPn3jB8 · Exploit
• 🔥 https://exploit-db.com/exploits/44776 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-11505 · Security Note
• https://osv.dev/vulnerability/CVE-2018-11505 · Vendor Advisory