CoreCVE
Back

LOW

Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service

Published Jan 17, 2022

Description

Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner jpcert
Published Jan 17, 2022
Updated Aug 2, 2024
Reserved Jan 6, 2022
Link CVE-2022-0131
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-0131
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-0131
ENISA EUVD
Assigner jpcert
Published Jan 17, 2022
Updated Aug 2, 2024
Exploited since n/a
Link EUVD-2022-15344
EUVD-2022-15344