In the "NQ Contacts Backup & Restore" application 1.1 for Android, RC4 encryption is used to secure the user password locally stored in shared preferences. Because there is a static RC4 key, an attacker can gain access to user credentials more easily by leveraging access to the preferences XML file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-29T17:00:00Z
Updated: 2024-09-17T00:51:39.239Z
Reserved: 2017-10-29T00:00:00Z
Link: CVE-2017-15997
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-10-29T17:29:00.250
Modified: 2024-11-21T03:15:38.247
Link: CVE-2017-15997
Redhat
No data.