2 results · Clear filters · Feed
-
Medium 6.2
Hardcoded API Key Discovered in GV-Cloud Android Application v1.5.1
An API key is hardcoded and retrievable from the GV-Cloud application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the …
-
Medium 6.2
Hardcoded RSA Private Key and Public Key Exposure in GV-Cloud Android Application v1.5.1
The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the clien…