CVEvulnerability
CVE-2017-15582
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-798
Description
In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries.
Affected configurations
• writediary diary with lock 4.72
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html Issue Tracking, Third Party Advisory
- https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa Issue Tracking, Third Party Advisory
- https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html Issue Tracking, Third Party Advisory
- https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa Issue Tracking, Third Party Advisory