CVE-2024-10748
Cosmote Greece What's Up App Realm Database RealmDB.java default key
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cosmote Greece What's Up App Realm Database RealmDB.java default key
A vulnerability, which was classified as problematic, has been found in Cosmote Greece What's Up App 4.47.3 on Android. This issue affects some unknown processing of the file gr/desquared/kmmsharedmodule/db/RealmDB.java of the component Realm Database Handler. The manipulation of the argument defaultRealmKey leads to use of default cryptographic key. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Eine Schwachstelle wurde in Cosmote Greece What's Up App 4.47.3 für Android entdeckt. Sie wurde als problematisch eingestuft. Dies betrifft einen unbekannten Teil der Datei gr/desquared/kmmsharedmodule/db/RealmDB.java der Komponente Realm Database Handler. Durch Manipulieren des Arguments defaultRealmKey mit unbekannten Daten kann eine use of default cryptographic key-Schwachstelle ausgenutzt werden. Umgesetzt werden muss der Angriff lokal. Die Komplexität eines Angriffs ist eher hoch. Die Ausnutzbarkeit gilt als schwierig.
Use of Default Cryptographic Key
| 2024-11-03: | Advisory disclosed |
| 2024-11-03: | VulDB entry created |
| 2024-11-03: | VulDB entry last update |
secuserx (VulDB User)
vuldb.com/?id.282917 (VDB-282917 | Cosmote Greece What's Up App Realm Database RealmDB.java default key)
vuldb.com/?ctiid.282917 (VDB-282917 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.432429 (Submit #432429 | Cosmote Greece What's UP Android App 4.47.3 Use of Hard-coded, Security-relevant Constants)
github.com/...ion Key] found in What's UP Android App 4.47.3 - (RealmDB.java).md
Support options
