Vulnerability · Published Nov 4, 2024 · Assigned by VulDB

CVE-2024-10748Cosmote Greece What's Up App Realm Database RealmDB.java default key

Low 2.5

In plain English

A low-severity security flaw in What's Up App from Cosmote Greece. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)2.5Low

Exploit odds (30 days)0.3%top 81.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, has been found in Cosmote Greece What's Up App 4.47.3 on Android. This issue affects some unknown processing of the file gr/desquared/kmmsharedmodule/db/RealmDB.java of the component Realm Database Handler. The manipulation of the argument defaultRealmKey leads to use of default cryptographic key. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Cosmote Greece	What's Up App	4.47.3

Weakness: CWE-1394 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

References

VDB-282917 | Cosmote Greece What's Up App Realm Database RealmDB.java default key vdb-entry, technical-description
VDB-282917 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #432429 | Cosmote Greece What's UP Android App 4.47.3 Use of Hard-coded, Security-relevant Constants third-party-advisory
https://github.com/secuserx/CVE/blob/main/%5BHardcoded%20Realm%20Database%20Encryption%20Key%5D%20found%20in%20What's%20UP%20Android%20App%204.47.3%20-%20(RealmDB.java).md related