QwikSec

Security Database

CVE

CWE

Training

CVE-2018-15753

Published: Oct 2, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attacker who decodes the application to decrypt transmitted data such as the login username and password.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://advisories.e2security.de/2018/E2SA-2018-01.txt

x_refsource_MISC

20181001 e2 Security GmbH Advisory 2018-01: MensaMax Android app / Unencrypted transmission and usage of hardcoded encryption key

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.