Search

Find a vulnerability

Search criteria

    2 vulnerabilities by liveme

    CVE-2017-13107 (GCVE-0-2017-13107)

    Vulnerability from nvd – Published: 2018-08-15 22:00 – Updated: 2024-08-05 18:58
    VLAI
    Title
    Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption
    Summary
    Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
    Severity
    No CVSS data available.
    CWE
    Assigner
    certcc CNA under the mitre root
    CNA scorecard E 42/100 over 158 records in the last 180 days details
    References
    URL Tags
    https://www.kb.cert.org/vuls/id/787952 third-party-advisoryx_refsource_CERT-VN
    Impacted products
    Vendor Product Version
    Live.me Live.me Affected: 3.7.20
    Create a notification for this product.
    Date Public
    2018-08-14 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T18:58:12.359Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "VU#787952",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
                  "x_transferred"
                ],
                "url": "https://www.kb.cert.org/vuls/id/787952"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "platforms": [
                "Android mobile"
              ],
              "product": "Live.me",
              "vendor": "Live.me",
              "versions": [
                {
                  "status": "affected",
                  "version": "3.7.20"
                }
              ]
            }
          ],
          "datePublic": "2018-08-14T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-798",
                  "description": "CWE-798",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-08-15T21:57:01.000Z",
            "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
            "shortName": "certcc"
          },
          "references": [
            {
              "name": "VU#787952",
              "tags": [
                "third-party-advisory",
                "x_refsource_CERT-VN"
              ],
              "url": "https://www.kb.cert.org/vuls/id/787952"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption",
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cert@cert.org",
              "ID": "CVE-2017-13107",
              "STATE": "PUBLIC",
              "TITLE": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Live.me",
                          "version": {
                            "version_data": [
                              {
                                "affected": "=",
                                "platform": "Android mobile",
                                "version_affected": "=",
                                "version_name": "3.7.20",
                                "version_value": "3.7.20"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Live.me"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-798"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "VU#787952",
                  "refsource": "CERT-VN",
                  "url": "https://www.kb.cert.org/vuls/id/787952"
                }
              ]
            },
            "source": {
              "discovery": "UNKNOWN"
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "assignerShortName": "certcc",
        "cveId": "CVE-2017-13107",
        "datePublished": "2018-08-15T22:00:00.000Z",
        "dateReserved": "2017-08-22T00:00:00.000Z",
        "dateUpdated": "2024-08-05T18:58:12.359Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2017-13107 (GCVE-0-2017-13107)

    Vulnerability from cvelistv5 – Published: 2018-08-15 22:00 – Updated: 2024-08-05 18:58
    VLAI
    Title
    Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption
    Summary
    Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.
    Severity
    No CVSS data available.
    CWE
    Assigner
    certcc CNA under the mitre root
    CNA scorecard E 42/100 over 158 records in the last 180 days details
    References
    URL Tags
    https://www.kb.cert.org/vuls/id/787952 third-party-advisoryx_refsource_CERT-VN
    Impacted products
    Vendor Product Version
    Live.me Live.me Affected: 3.7.20
    Create a notification for this product.
    Date Public
    2018-08-14 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T18:58:12.359Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "VU#787952",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
                  "x_transferred"
                ],
                "url": "https://www.kb.cert.org/vuls/id/787952"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "platforms": [
                "Android mobile"
              ],
              "product": "Live.me",
              "vendor": "Live.me",
              "versions": [
                {
                  "status": "affected",
                  "version": "3.7.20"
                }
              ]
            }
          ],
          "datePublic": "2018-08-14T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-798",
                  "description": "CWE-798",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-08-15T21:57:01.000Z",
            "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
            "shortName": "certcc"
          },
          "references": [
            {
              "name": "VU#787952",
              "tags": [
                "third-party-advisory",
                "x_refsource_CERT-VN"
              ],
              "url": "https://www.kb.cert.org/vuls/id/787952"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption",
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cert@cert.org",
              "ID": "CVE-2017-13107",
              "STATE": "PUBLIC",
              "TITLE": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Live.me",
                          "version": {
                            "version_data": [
                              {
                                "affected": "=",
                                "platform": "Android mobile",
                                "version_affected": "=",
                                "version_name": "3.7.20",
                                "version_value": "3.7.20"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Live.me"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "CWE-798"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "VU#787952",
                  "refsource": "CERT-VN",
                  "url": "https://www.kb.cert.org/vuls/id/787952"
                }
              ]
            },
            "source": {
              "discovery": "UNKNOWN"
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "assignerShortName": "certcc",
        "cveId": "CVE-2017-13107",
        "datePublished": "2018-08-15T22:00:00.000Z",
        "dateReserved": "2017-08-22T00:00:00.000Z",
        "dateUpdated": "2024-08-05T18:58:12.359Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }