Threats tagged 'ghsa-4xjp-j2hw-grcm'

The LaserGest mobile application uses a hardcoded AES key and IV to encrypt stored assistance portal credentials. This practice allows an attacker who can access the application package to decrypt and recover these credentials in cleartext. The vulnerability is classified as high severity with a CVSS score of 8.7.