Shinrays Games Goods Triple App cats.goods.sort.sorting.games jRwTX.java hard-coded key
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 2epss 0.1%
exploitation probability
0.1%top 99% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A security flaw has been discovered in Shinrays Games Goods Triple App up to 1.200. The affected element is an unknown function of the file jRwTX.java of the component cats.goods.sort.sorting.games. Performing a manipulation of the argument AES_IV/AES_PASSWORD results in use of hard-coded cryptographic key
. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
Shinrays Games · Goods Triple Apppublic PoCs found — 1
cve_referencewww.notion.so/Exposed-Cryptographic-Key-and-IV-in-cats-goods-sort-sorting-games-3262de3f97fb801499ebc3dfd56e232e?source=copy_linkunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.