bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but stored within the config.php file server-side as well as in clear-text on the android client device by default.
References
| Link | Resource |
|---|---|
| https://gainsec.com/2022/08/07/cve-2022-hardcoded-creds-weak-password-hauk-android-location-sharing/ | Third Party Advisory |
| https://github.com/bilde2910/Hauk/issues/187 | Issue Tracking Third Party Advisory |
| https://gainsec.com/2022/08/07/cve-2022-hardcoded-creds-weak-password-hauk-android-location-sharing/ | Third Party Advisory |
| https://github.com/bilde2910/Hauk/issues/187 | Issue Tracking Third Party Advisory |
Configurations
History
21 Nov 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gainsec.com/2022/08/07/cve-2022-hardcoded-creds-weak-password-hauk-android-location-sharing/ - Third Party Advisory | |
| References | () https://github.com/bilde2910/Hauk/issues/187 - Issue Tracking, Third Party Advisory |
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-312 |
14 Sep 2022, 14:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hauk_project:hauk:1.6.1:*:*:*:*:*:*:* | |
| References | (MISC) https://gainsec.com/2022/08/07/cve-2022-hardcoded-creds-weak-password-hauk-android-location-sharing/ - Third Party Advisory | |
| References | (MISC) https://github.com/bilde2910/Hauk/issues/187 - Issue Tracking, Third Party Advisory | |
| CWE | CWE-798 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
08 Sep 2022, 16:34
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-08 16:15
Updated : 2024-11-21 07:15
NVD link : CVE-2022-37857
Mitre link : CVE-2022-37857
CVE.ORG link : CVE-2022-37857
JSON object : View
Products Affected
hauk_project
- hauk