High severity7.5NVD Advisory· Published Aug 1, 2017· Updated May 13, 2026
CVE-2017-11135
CVE-2017-11135
Description
An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore, an attacker only needs to know the device ID. This causes a denial of service. This might be interpreted as a vulnerability in customer-controlled software, in the sense that the StashCat client side has no secure way to signal that it is ending a session and that data should be deleted.
Affected products
3cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*+ 2 more
- cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:*:android:*:*range: <=1.7.5
- cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:web:*:*:*range: <=0.0.80w
- cpe:2.3:a:stashcat:heinekingmedia:*:*:*:*:desktop:*:*:*range: <=0.0.86w
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- seclists.org/fulldisclosure/2017/Jul/90nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.