CVE Catalog
CVE-2017-11129
CriticalSummary
An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android related to key storage. The keystore is locked with a hard-coded password, allowing anyone with access to read its contents, including the user's private key.
Risk Assessment
Access to private keys can lead to serious security breaches, including identity theft and unauthorized access to data.
Recommendation
It is recommended to remove the hard-coded password and implement more secure key management practices to limit access to sensitive data.
Original NVD description (English source)
An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content out, for example the private key of the user.