2 results · Clear filters · Feed
-
Medium 6.2
Hardcoded RSA Private Key and Public Key Exposure in GV-Access Android Application v1.6.1
The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the clie…
-
Medium 6.2
Hardcoded API Key Discovered in GV-Access Android Application v1.6.1
An API key is hardcoded and retrievable from the GV-Access package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key.