Description (CNA)
Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Retty Inc. / Retty App | affected Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 |
CWE
No CWE identifiers supplied.
References
- https://drive.google.com/file/d/1PBYqIsK8QxEEhGJ4SEgpY7iZw3RTTDho/view
- https://jvn.jp/en/jp/JVN26891339/index.html
ADP enrichment
No English description supplied.