PT-2022-22954 · Hulu · Hulu App For Android

Ryo Sato · Published 2022-08-16 · Updated 2023-03-01 · CVE-2022-35734

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hulu App for Android versions 3.0.47 through 3.1.1

Description The issue concerns the use of a hard-coded API key for an external service in the Hulu App for Android. This could potentially allow the API key to be obtained by analyzing the app's data, thus compromising the security of the external service.

Recommendations For Hulu App for Android versions 3.0.47 through 3.1.1, consider updating to version 3.1.2 or later to resolve the issue.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2022-35734

Affected Products

Hulu App For Android

References · 3

• https://osv.dev/vulnerability/CVE-2022-35734 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35734 · Security Note
• https://jvn.jp/en/jp/JVN40907489/index.html · Note