VYPR
Get started
← All advisories
High severity8.1NVD Advisory· Published Aug 1, 2017· Updated May 13, 2026

CVE-2017-11130

CVE-2017-11130

Description

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks.

Affected products

3
  • Stashcat/Heinekingmedia3 versions
    cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*+ 2 more
    • cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*range: <=1.7.5
    • cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:web:*:*:*range: <=0.0.80w
    • cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:desktop:*:*:*range: <=0.0.86w

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.