CVE-2018-5298 | BDVDB-2026-94918 Detail

Description#

In the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralbapp) application 5.0.0 for Android, AES encryption with static parameters is used to secure the locally stored shared preferences. An attacker can gain access to locally stored user data more easily by leveraging access to the preferences XML file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://1337sec.blogspot.de/2018/01/auditing-oral-b-app-v500.html

Exploit#

No public exploit known

History#

Version 12018-01-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.