CVE-2017-15582

2017-10-2720:00:00

mitre

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

54.9%

JSON

In net.MCrypt in the “Diary with lock” (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries.

References

1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html

gist.github.com/anonymous/603b89f864a71426042b167cab557efa