PT-2022-11864 · Unknown · Flightradar24

Published 2022-05-31 · Updated 2022-06-10 · CVE-2021-43512

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FlightRadar24 versions 8.9.0 through 8.10.4

Description An issue in FlightRadar24 allows attackers to cause unspecified consequences by decompiling the local application and extracting API keys.

Recommendations For versions 8.9.0 through 8.10.4, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2021-43512

Affected Products

Flightradar24

References · 5

• https://osv.dev/vulnerability/CVE-2021-43512 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43512 · Security Note
• https://flightradar24.com · Vendor Advisory
• https://medium.com/%40janmejayaswainofficial/advisory-of-cve-2021-43512-5e54e6a93101 · Note
• https://flightradar24.com.aa · Note