CVE-2020-5667 - Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service · CoreCVE

Back Back to CVE browser

MEDIUM

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service

Published Nov 6, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.27%

Description

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

Affected products

Vendor Studyplus Inc. Product Studyplus App Default
n/a
- Version
  for Android v6.3.7 and earlier, and for iOS v8.29.0 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
for Android v6.3.7 and earlier, and for iOS v8.29.0 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26828
Advisory
https://jvn.jp/en/jp/JVN00414047/index.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26828		Advisory
https://jvn.jp/en/jp/JVN00414047/index.html		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Nov 6, 2020

Updated Aug 4, 2024

Reserved Jan 6, 2020

Link CVE-2020-5667

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2020-5667

Severity n/a

Public date n/a

Links CVE-2020-5667

Assigner jpcert

Published Nov 6, 2020

Updated Aug 4, 2024

Exploited since n/a

Link EUVD-2020-26828

EUVD-2020-26828