Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption
CVE-2017-13104

7.5HIGH

Key Information:

Vendor

Uber Technologies, Inc.

Status
Ubereats: Uber For Food Delivery
Vendor
CVE Published:
15 August 2018

What is CVE-2017-13104?

Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.

Affected Version(s)

UberEATS: Uber for Food Delivery iOS mobile 1.108.10001

References

https://www.kb.cert.org/vuls/id/787952
third-party-advisoryx_refsource_CERT-VN

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.