Security Advisory

CVE-2024-32988

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-22 07:37:32
Last updated 2024-08-02 02:27:53
Assigner jpcert
State PUBLISHED

Description

OfferBox App for Android versions 2.0.0 to 2.3.17 and OfferBox App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT. Secret key for JWT may be retrieved if the application binary is reverse-engineered.