2 results (0.009 seconds)

CVSS: 6.3EPSS: 0%CPEs: 2EXPL: 1

CVE-2023-46919

https://notcve.org/view.php?id=CVE-2023-46919

27 Dec 2023 — Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K encryption key. The threat is from a man-in-the-middle attacker who can intercept and potentially modify data during transmission. Phlox com.phlox.simpleserver (también conocido como Simple HTTP Server) 1.8 y com.phlox.simpleserver.plus (también conocido como Simple HTTP Server PLUS) 1.8.1-plus tienen una clave de cifrado aKySWb2jjrr4dzk... • https://github.com/actuator/com.phlox.simpleserver/blob/main/CWE-321.md • CWE-798: Use of Hard-coded Credentials •

CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-46918

https://notcve.org/view.php?id=CVE-2023-46918

27 Dec 2023 — Phlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus has an Android manifest file that contains an entry with the android:allowBackup attribute set to true. This could be leveraged by an attacker with physical access to the device. Phlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus tiene un archivo de manifiesto de Android que contiene una entrada con el atributo android:allowBackup establecido en verdadero. Esto podría ser aprovechado por un atacante con acceso... • https://github.com/actuator/com.phlox.simpleserver/blob/main/CWE-321.md • CWE-798: Use of Hard-coded Credentials •