Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for asphalt_xtreme by gameloft

    CVE-2017-13102 (GCVE-0-2017-13102)

    Vulnerability from nvd – Published: 2018-08-15 22:00 – Updated: 2024-08-05 18:58
    VLAI
    Title
    Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption
    Summary
    Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
    Severity
    No CVSS data available.
    CWE
    Assigner
    certcc CNA under the mitre root
    CNA scorecard E 42/100 over 158 records in the last 180 days details
    References
    URL Tags
    https://www.kb.cert.org/vuls/id/787952 third-party-advisoryx_refsource_CERT-VN
    Impacted products
    Date Public
    2018-08-14 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T18:58:12.339Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "VU#787952",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
                  "x_transferred"
                ],
                "url": "https://www.kb.cert.org/vuls/id/787952"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "platforms": [
                "iOS mobile"
              ],
              "product": "Asphalt Xtreme: Offroad Rally Racing",
              "vendor": "Gameloft",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.6.0"
                }
              ]
            }
          ],
          "datePublic": "2018-08-14T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-798",
                  "description": "CWE-798",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-08-15T21:57:01.000Z",
            "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
            "shortName": "certcc"
          },
          "references": [
            {
              "name": "VU#787952",
              "tags": [
                "third-party-advisory",
                "x_refsource_CERT-VN"
              ],
              "url": "https://www.kb.cert.org/vuls/id/787952"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption",
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cert@cert.org",
              "ID": "CVE-2017-13102",
              "STATE": "PUBLIC",
              "TITLE": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Asphalt Xtreme: Offroad Rally Racing",
                          "version": {
                            "version_data": [
                              {
                                "affected": "=",
                                "platform": "iOS mobile",
                                "version_affected": "=",
                                "version_name": "1.6.0",
                                "version_value": "1.6.0"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Gameloft"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-798"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "VU#787952",
                  "refsource": "CERT-VN",
                  "url": "https://www.kb.cert.org/vuls/id/787952"
                }
              ]
            },
            "source": {
              "discovery": "UNKNOWN"
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "assignerShortName": "certcc",
        "cveId": "CVE-2017-13102",
        "datePublished": "2018-08-15T22:00:00.000Z",
        "dateReserved": "2017-08-22T00:00:00.000Z",
        "dateUpdated": "2024-08-05T18:58:12.339Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2017-13102 (GCVE-0-2017-13102)

    Vulnerability from cvelistv5 – Published: 2018-08-15 22:00 – Updated: 2024-08-05 18:58
    VLAI
    Title
    Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption
    Summary
    Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
    Severity
    No CVSS data available.
    CWE
    Assigner
    certcc CNA under the mitre root
    CNA scorecard E 42/100 over 158 records in the last 180 days details
    References
    URL Tags
    https://www.kb.cert.org/vuls/id/787952 third-party-advisoryx_refsource_CERT-VN
    Impacted products
    Date Public
    2018-08-14 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T18:58:12.339Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "VU#787952",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
                  "x_transferred"
                ],
                "url": "https://www.kb.cert.org/vuls/id/787952"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "platforms": [
                "iOS mobile"
              ],
              "product": "Asphalt Xtreme: Offroad Rally Racing",
              "vendor": "Gameloft",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.6.0"
                }
              ]
            }
          ],
          "datePublic": "2018-08-14T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-798",
                  "description": "CWE-798",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-08-15T21:57:01.000Z",
            "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
            "shortName": "certcc"
          },
          "references": [
            {
              "name": "VU#787952",
              "tags": [
                "third-party-advisory",
                "x_refsource_CERT-VN"
              ],
              "url": "https://www.kb.cert.org/vuls/id/787952"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption",
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cert@cert.org",
              "ID": "CVE-2017-13102",
              "STATE": "PUBLIC",
              "TITLE": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Asphalt Xtreme: Offroad Rally Racing",
                          "version": {
                            "version_data": [
                              {
                                "affected": "=",
                                "platform": "iOS mobile",
                                "version_affected": "=",
                                "version_name": "1.6.0",
                                "version_value": "1.6.0"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Gameloft"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-798"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "VU#787952",
                  "refsource": "CERT-VN",
                  "url": "https://www.kb.cert.org/vuls/id/787952"
                }
              ]
            },
            "source": {
              "discovery": "UNKNOWN"
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "assignerShortName": "certcc",
        "cveId": "CVE-2017-13102",
        "datePublished": "2018-08-15T22:00:00.000Z",
        "dateReserved": "2017-08-22T00:00:00.000Z",
        "dateUpdated": "2024-08-05T18:58:12.339Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }