2022-07-23 10:00:42 +00:00
{
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
"CVE_data_meta" : {
"ID" : "CVE-2022-35734" ,
2022-08-16 08:00:37 +00:00
"ASSIGNER" : "vultures@jpcert.or.jp" ,
"STATE" : "PUBLIC"
2022-08-16 15:38:27 +09:00
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "HJ Holdings, Inc." ,
"product" : {
"product_data" : [
{
2022-08-16 08:00:37 +00:00
"product_name" : "'Hulu / \u30d5\u30fc\u30eb\u30fc' App for Android" ,
2022-08-16 15:38:27 +09:00
"version" : {
"version_data" : [
{
"version_value" : "from version 3.0.47 to the version prior to 3.1.2"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Use of Hard-coded Credentials"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
2022-08-16 08:00:37 +00:00
"url" : "https://jvn.jp/en/jp/JVN40907489/index.html" ,
"refsource" : "MISC" ,
"name" : "https://jvn.jp/en/jp/JVN40907489/index.html"
2022-08-16 15:38:27 +09:00
}
]
2022-07-23 10:00:42 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2022-08-16 08:00:37 +00:00
"value" : "'Hulu / \u30d5\u30fc\u30eb\u30fc' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app."
2022-07-23 10:00:42 +00:00
}
]
}
2022-08-16 08:00:37 +00:00
}