cve/2017/CVE-2017-13107.md

18 lines
671 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2017-13107](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13107)
![](https://img.shields.io/static/v1?label=Product&message=Live.me&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=3.7.203.7.20%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-798&color=brighgreen)
### Description
Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
### POC
#### Reference
- https://www.kb.cert.org/vuls/id/787952
#### Github
No PoCs found on GitHub currently.