{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2017-10-27T00:00:00", "descriptions": [{"lang": "en", "value": "In net.MCrypt in the \"Diary with lock\" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-27T19:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html"}, {"tags": ["x_refsource_MISC"], "url": "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2017-15582", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In net.MCrypt in the \"Diary with lock\" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html", "refsource": "MISC", "url": "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html"}, {"name": "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa", "refsource": "MISC", "url": "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T19:57:27.044Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-15582", "datePublished": "2017-10-27T20:00:00", "dateReserved": "2017-10-18T00:00:00", "dateUpdated": "2024-08-05T19:57:27.044Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:writediary:diary_with_lock:4.72:*:*:*:*:android:*:*", "matchCriteriaId": "5BB6A5D8-4DA9-4860-9FA2-AA5989508EA0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In net.MCrypt in the \"Diary with lock\" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries."}, {"lang": "es", "value": "En net.MCrypt en la aplicaci\u00f3n \"Diary with lock\" (tambi\u00e9n conocida como WriteDiary) en su versi\u00f3n 4.72 para Android, las variables embebidas SecretKey e iv se utilizan para los par\u00e1metros AES, lo que hace que sea mas f\u00e1cil para los atacantes obtener las entradas de los diarios almacenadas en texto claro."}], "id": "CVE-2017-15582", "lastModified": "2024-11-21T03:14:48.087", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2017-10-27T20:29:01.137", "references": [{"source": "[email protected]", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html"}, {"source": "[email protected]", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "[email protected]", "type": "Primary"}]}

{}