CVE-2026-111489:詳細資料

CVE-2026-111489

2026-11-05
22h17 +00:00
A07-Identif. and Authent. Fail
2026-11-10
14h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

參考資料