Vendor
Resamania
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.6
Embedded credentials in Virtuagym
The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badge_number' parameter as the HMAC private key, the value of which remains st…