Skip to content
OpenAdvisories
Medium · 4.0 CVE-2024-38480 EUVD-2024-37360GHSA-jc4p-8qhr-mrv4

"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may allow a local attac…

Published Jul 1, 2024 · Updated Nov 12, 2024 · Assigned by jpcert

Description

"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may allow a local attacker to obtain the API key. Note that the users of the app are not directly affected by this vulnerability.

Affected products

VendorProductAffectedFixed
Kakao piccoma "Piccoma" App for Android prior to 6.20.0 —
Kakao piccoma "Piccoma" App for iOS prior to 6.20.0 —

References