Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and including version 1.7.22 allows a remote attacker to access developer files stored in an AWS S3 bucket, by reading credentials stored in plain text within the mobile application.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Vulnerability Type
N/A
Vulnerability Title
Amazon AWS SDK for Android安全漏洞
Vulnerability Description
Amazon AWS SDK for Android是美国亚马逊（Amazon）公司的一款基于Andorid平台的用于Amazon Web Services（AWS）的软件开发工具包。 Amazon AWS SDK for Android 存在安全漏洞，该漏洞源于受影响产品将敏感信息暴露给未经授权的参与者，允许远程攻击者通过读取存储在 AWS S3 存储桶中的纯文本凭证来访问存储在 AWS S3 存储桶中的开发人员文件移动应用程序。
CVSS Information
N/A
Vulnerability Type
N/A