Description
"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an external service, which may allow a local attacker to obtain the API key. Note that the users of the app are not directly affected by this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kakao piccoma | "Piccoma" App for Android | prior to 6.20.0 | — |
| Kakao piccoma | "Piccoma" App for iOS | prior to 6.20.0 | — |