CVEvulnerability
CVE-2017-15581
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-311
Description
In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, despite the documentation that the product is intended for "a personal journal of ... secrets and feelings," which allows remote attackers to obtain sensitive information by sniffing the network during LoginActivity or NoteActivity execution.
Affected configurations
• writediary diary with lock 4.72
Related
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html Issue Tracking, Third Party Advisory
- https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa Issue Tracking, Third Party Advisory
- https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html Issue Tracking, Third Party Advisory
- https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa Issue Tracking, Third Party Advisory