CVE Catalog
CVE-2023-3632
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.64%
46th percentile - higher than 46% of all known CVEs
Summary
The vulnerability related to the use of a hard-coded cryptographic key in the Kunduz - Homework Helper app allows for authentication abuse and bypass. This issue affects versions of the app before 6.2.3.
Risk Assessment
Authentication abuse may lead to unauthorized access to user data, posing a significant threat to information security within the organization.
Recommendation
It is recommended to update the Kunduz - Homework Helper app to version 6.2.3 or later to mitigate this vulnerability.
Original NVD description (English source)
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3.