← CVE Intelligence

CVE-2024-32988

i-plug inc. / 'OfferBox' App for Android PUBLISHED

Description (CNA)

'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT. Secret key for JWT may be retrieved if the application binary is reverse-engineered.

Affected (CNA)

Vendor / productVersions
i-plug inc. / 'OfferBox' App for Androidaffected 2.0.0 to 2.3.17
i-plug inc. / 'OfferBox' App for iOSaffected 2.1.7 to 2.6.14

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.