Unscored CVE-2018-15753 EUVD-2018-7619GHSA-5648-r6xq-fcf9

An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic…

Published Oct 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attacker who decodes the application to decrypt transmitted data such as the login username and password.

References

https://advisories.e2security.de/2018/E2SA-2018-01.txt
20181001 e2 Security GmbH Advisory 2018-01: MensaMax Android app / Unencrypted transmission and usage of hardcoded encryption key mailing-list